# CVE-2022-2929: dhcp-client: The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get t...

CVE-2022-2929 is fixed in 12 products on 1 platform, first by isc-dhcp-client 4.3.5-3ubuntu7.4, released October 4, 2022. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2022-2929
- Priority: Routine
- CVSS: 6.5 (Moderate)
- EPSS: 0.0066
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 4, 2022

## Description

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.  Security Fix(es):  * dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort (CVE-2022-2928)  * dhcp: DHCP memory leak (CVE-2022-2929)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | dhcp-client RHEL 8 | 12:4.3.6-49.el8 | [RHSA-2023:3000](https://patchblox.com/security/data/fix/linux/rhsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-client RHEL 9 | 12:4.4.2-18.b1.el9 | [RHSA-2023:2502](https://patchblox.com/security/data/fix/linux/rhsa-2023-2502.md) | May 9, 2023 |
| Linux | dhcp-client almalinux 8 | 12:4.3.6-49.el8 | [ALSA-2023:3000](https://patchblox.com/security/data/fix/linux/alsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-client almalinux 9 | 12:4.4.2-18.b1.el9 | [ALSA-2023:2502](https://patchblox.com/security/data/fix/linux/alsa-2023-2502.md) | May 9, 2023 |
| Linux | dhcp-client ol 8 | 12:4.3.6-49.el8 | [ELSA-2023-3000](https://patchblox.com/security/data/fix/linux/elsa-2023-3000.md) | May 24, 2023 |
| Linux | dhcp-client ol 9 | 12:4.4.2-18.b1.el9 | [ELSA-2023-2502](https://patchblox.com/security/data/fix/linux/elsa-2023-2502.md) | May 15, 2023 |
| Linux | dhcp-common RHEL 8 | 12:4.3.6-49.el8 | [RHSA-2023:3000](https://patchblox.com/security/data/fix/linux/rhsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-common RHEL 9 | 12:4.4.2-18.b1.el9 | [RHSA-2023:2502](https://patchblox.com/security/data/fix/linux/rhsa-2023-2502.md) | May 9, 2023 |
| Linux | dhcp-common almalinux 8 | 12:4.3.6-49.el8 | [ALSA-2023:3000](https://patchblox.com/security/data/fix/linux/alsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-common almalinux 9 | 12:4.4.2-18.b1.el9 | [ALSA-2023:2502](https://patchblox.com/security/data/fix/linux/alsa-2023-2502.md) | May 9, 2023 |
| Linux | dhcp-common ol 8 | 12:4.3.6-49.el8 | [ELSA-2023-3000](https://patchblox.com/security/data/fix/linux/elsa-2023-3000.md) | May 24, 2023 |
| Linux | dhcp-common ol 9 | 12:4.4.2-18.b1.el9 | [ELSA-2023-2502](https://patchblox.com/security/data/fix/linux/elsa-2023-2502.md) | May 15, 2023 |
| Linux | dhcp-libs RHEL 8 | 12:4.3.6-49.el8 | [RHSA-2023:3000](https://patchblox.com/security/data/fix/linux/rhsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-libs almalinux 8 | 12:4.3.6-49.el8 | [ALSA-2023:3000](https://patchblox.com/security/data/fix/linux/alsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-libs ol 8 | 12:4.3.6-49.el8 | [ELSA-2023-3000](https://patchblox.com/security/data/fix/linux/elsa-2023-3000.md) | May 24, 2023 |
| Linux | dhcp-relay RHEL 8 | 12:4.3.6-49.el8 | [RHSA-2023:3000](https://patchblox.com/security/data/fix/linux/rhsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-relay RHEL 9 | 12:4.4.2-18.b1.el9 | [RHSA-2023:2502](https://patchblox.com/security/data/fix/linux/rhsa-2023-2502.md) | May 9, 2023 |
| Linux | dhcp-relay almalinux 8 | 12:4.3.6-49.el8 | [ALSA-2023:3000](https://patchblox.com/security/data/fix/linux/alsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-relay almalinux 9 | 12:4.4.2-18.b1.el9 | [ALSA-2023:2502](https://patchblox.com/security/data/fix/linux/alsa-2023-2502.md) | May 9, 2023 |
| Linux | dhcp-relay ol 8 | 12:4.3.6-49.el8 | [ELSA-2023-3000](https://patchblox.com/security/data/fix/linux/elsa-2023-3000.md) | May 24, 2023 |
| Linux | dhcp-relay ol 9 | 12:4.4.2-18.b1.el9 | [ELSA-2023-2502](https://patchblox.com/security/data/fix/linux/elsa-2023-2502.md) | May 15, 2023 |
| Linux | dhcp-server RHEL 8 | 12:4.3.6-49.el8 | [RHSA-2023:3000](https://patchblox.com/security/data/fix/linux/rhsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-server RHEL 9 | 12:4.4.2-18.b1.el9 | [RHSA-2023:2502](https://patchblox.com/security/data/fix/linux/rhsa-2023-2502.md) | May 9, 2023 |
| Linux | dhcp-server almalinux 8 | 12:4.3.6-49.el8 | [ALSA-2023:3000](https://patchblox.com/security/data/fix/linux/alsa-2023-3000.md) | May 16, 2023 |
| Linux | dhcp-server almalinux 9 | 12:4.4.2-18.b1.el9 | [ALSA-2023:2502](https://patchblox.com/security/data/fix/linux/alsa-2023-2502.md) | May 9, 2023 |
| Linux | dhcp-server ol 8 | 12:4.3.6-49.el8 | [ELSA-2023-3000](https://patchblox.com/security/data/fix/linux/elsa-2023-3000.md) | May 24, 2023 |
| Linux | dhcp-server ol 9 | 12:4.4.2-18.b1.el9 | [ELSA-2023-2502](https://patchblox.com/security/data/fix/linux/elsa-2023-2502.md) | May 15, 2023 |
| Linux | isc-dhcp Debian 12.15 (bookworm) | 4.4.3-2.1 | [DEBIAN-CVE-2022-2929](https://patchblox.com/security/data/fix/linux/debian-cve-2022-2929.md) | Oct 7, 2022 |
| Linux | isc-dhcp Debian 13.5 (trixie) | 4.4.3-2.1 | [DEBIAN-CVE-2022-2929](https://patchblox.com/security/data/fix/linux/debian-cve-2022-2929.md) | Oct 7, 2022 |
| Linux | isc-dhcp-client Ubuntu 18.04.6 LTS (bionic) | 4.3.5-3ubuntu7.4 | [isc-dhcp-client 4.3.5-3ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-isc-dhcp-client-4.3.5-3ubuntu7.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-client Ubuntu 20.04 LTS (focal) | 4.4.1-2.1ubuntu5.20.04.4 | [isc-dhcp-client 4.4.1-2.1ubuntu5.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-isc-dhcp-client-4.4.1-2.1ubuntu5.20.04.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-client Ubuntu 22.04.1 LTS (jammy) | 4.4.1-2.3ubuntu2.3 | [isc-dhcp-client 4.4.1-2.3ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-isc-dhcp-client-4.4.1-2.3ubuntu2.3.md) | Oct 4, 2022 |
| Linux | isc-dhcp-client-ddns Ubuntu 18.04.6 LTS (bionic) | 4.3.5-3ubuntu7.4 | [isc-dhcp-client-ddns 4.3.5-3ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-isc-dhcp-client-ddns-4.3.5-3ubuntu7.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-client-ddns Ubuntu 20.04 LTS (focal) | 4.4.1-2.1ubuntu5.20.04.4 | [isc-dhcp-client-ddns 4.4.1-2.1ubuntu5.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-isc-dhcp-client-ddns-4.4.1-2.1ubuntu5.20.04.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-client-ddns Ubuntu 22.04.1 LTS (jammy) | 4.4.1-2.3ubuntu2.3 | [isc-dhcp-client-ddns 4.4.1-2.3ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-isc-dhcp-client-ddns-4.4.1-2.3ubuntu2.3.md) | Oct 4, 2022 |
| Linux | isc-dhcp-common Ubuntu 18.04.6 LTS (bionic) | 4.3.5-3ubuntu7.4 | [isc-dhcp-common 4.3.5-3ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-isc-dhcp-common-4.3.5-3ubuntu7.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-common Ubuntu 20.04 LTS (focal) | 4.4.1-2.1ubuntu5.20.04.4 | [isc-dhcp-common 4.4.1-2.1ubuntu5.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-isc-dhcp-common-4.4.1-2.1ubuntu5.20.04.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-common Ubuntu 22.04.1 LTS (jammy) | 4.4.1-2.3ubuntu2.3 | [isc-dhcp-common 4.4.1-2.3ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-isc-dhcp-common-4.4.1-2.3ubuntu2.3.md) | Oct 4, 2022 |
| Linux | isc-dhcp-relay Ubuntu 18.04.6 LTS (bionic) | 4.3.5-3ubuntu7.4 | [isc-dhcp-relay 4.3.5-3ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-isc-dhcp-relay-4.3.5-3ubuntu7.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-relay Ubuntu 20.04 LTS (focal) | 4.4.1-2.1ubuntu5.20.04.4 | [isc-dhcp-relay 4.4.1-2.1ubuntu5.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-isc-dhcp-relay-4.4.1-2.1ubuntu5.20.04.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-relay Ubuntu 22.04.1 LTS (jammy) | 4.4.1-2.3ubuntu2.3 | [isc-dhcp-relay 4.4.1-2.3ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-isc-dhcp-relay-4.4.1-2.3ubuntu2.3.md) | Oct 4, 2022 |
| Linux | isc-dhcp-server Ubuntu 18.04.6 LTS (bionic) | 4.3.5-3ubuntu7.4 | [isc-dhcp-server 4.3.5-3ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-isc-dhcp-server-4.3.5-3ubuntu7.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-server Ubuntu 20.04 LTS (focal) | 4.4.1-2.1ubuntu5.20.04.4 | [isc-dhcp-server 4.4.1-2.1ubuntu5.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-isc-dhcp-server-4.4.1-2.1ubuntu5.20.04.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-server Ubuntu 22.04.1 LTS (jammy) | 4.4.1-2.3ubuntu2.3 | [isc-dhcp-server 4.4.1-2.3ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-isc-dhcp-server-4.4.1-2.3ubuntu2.3.md) | Oct 4, 2022 |
| Linux | isc-dhcp-server-ldap Ubuntu 18.04.6 LTS (bionic) | 4.3.5-3ubuntu7.4 | [isc-dhcp-server-ldap 4.3.5-3ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-isc-dhcp-server-ldap-4.3.5-3ubuntu7.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-server-ldap Ubuntu 20.04 LTS (focal) | 4.4.1-2.1ubuntu5.20.04.4 | [isc-dhcp-server-ldap 4.4.1-2.1ubuntu5.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-isc-dhcp-server-ldap-4.4.1-2.1ubuntu5.20.04.4.md) | Oct 4, 2022 |
| Linux | isc-dhcp-server-ldap Ubuntu 22.04.1 LTS (jammy) | 4.4.1-2.3ubuntu2.3 | [isc-dhcp-server-ldap 4.4.1-2.3ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-isc-dhcp-server-ldap-4.4.1-2.3ubuntu2.3.md) | Oct 4, 2022 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.