Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 5 Oct 2022 18:29:06 +0200
From: Peter Davies <>
Subject: ISC has disclosed two vulnerabilities in ISC DHCP (CVE-2022-2928,

On 5 October 2022 we (Internet Systems Consortium) disclosed two 
vulnerabilities affecting our ISC DHCP software:

- CVE-2022-2928 An option refcount overflow exists in dhcpd
- CVE-2022-2929 DHCP memory leak

New versions of ISC DHCP are available from

Operators and package maintainers who prefer to apply patches 
selectively can find individual vulnerability-specific patches in the 
"patches" subdirectory of the release directories for our stable release 
branches (4.4.3-P1 and 4.1-R16-P2):


With the public announcement of these vulnerabilities, the embargo 
period is ended and any updated software packages that have been 
prepared may be released.

ISC Support

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.