About the DHCP vulnerability(CVE-2015-8605)

Issue

• According to "Statement" of CVE-2015-8605, RHEL seems not to be affected by this vulnerability.
• However, according to "Affected Packages State", dhcp may be affected and it will not be fixed.
• So we cannot judge whether RHEL is affected by this vulnerability or not. Please answer the following questions.
• Is dhcp of RHEL5, 6, or 7 affected by this vulnerability?
• If it is so, which versions of dhcp are affected?
• If it is affected, is there a workaround?