CVE-2024-38236

HighCVSS 7.5

Published: 10/09/2024(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.30%

82th percentile - higher than 82% of all known CVEs

Summary

Denial of Service vulnerability in DHCP Server service. An attacker could cause the DHCP service to fail.

Risk Assessment

Risk of disrupting IP address allocation in the network, which may prevent network clients from functioning.

Recommendation

Install security updates for Windows.

Other vulnerabilities in DHCP Server

CVE-2026-18103Medium
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI port, especially if not secured with TSIG, can send a specially crafted lease creation request with an overly long InfiniBand MAC address, triggering a buffer overflow in print_hw_addr(). Successful exploitation leads to persistent denial of service, crashing dhcpd and preventing restart without manual intervention.

Original NVD description (English source)

DHCP Server Service Denial of Service Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS