Published: 31/01/2011 Updated: 01/04/2020

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x prior to 4.1.2-P1, 4.0-ESV and 4.1-ESV prior to 4.1-ESV-R1, and 4.2.x prior to 4.2.1b1 allows remote malicious users to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.

Vulnerable Product	Search on Vulmon	Subscribe to Product
isc dhcp 4.0
isc dhcp 4.0.0
isc dhcp 4.0.1
isc dhcp 4.0.2
isc dhcp 4.0.3
isc dhcp 4.1.0
isc dhcp 4.1.1
isc dhcp 4.1.2
isc dhcp 4.0-esv
isc dhcp 4.1-esv
isc dhcp 4.2.0

Debian Bug report logs - #611217 CVE-2011-0413: crash after DHCPv6 decline message Package: isc-dhcp-server; Maintainer for isc-dhcp-server is Debian ISC DHCP Maintainers <isc-dhcp@packagesdebianorg>; Source for isc-dhcp-server is src:isc-dhcp (PTS, buildd, popcon) Reported by: Raphael Geissert <geissert@debianorg> ...

It was discovered that the ISC DHCPv6 server does not correctly process requests which come from unexpected source addresses, leading to an assertion failure and a daemon crash The oldstable distribution (lenny) is not affected by this problem For the stable distribution (squeeze), this problem has been fixed in version 411-P1-15+squeeze1 For ...

CWE-20 http://www.osvdb.org/70680 http://www.isc.org/software/dhcp/advisories/cve-2011-0413 http://www.vupen.com/english/advisories/2011/0235 http://secunia.com/advisories/43006 http://secunia.com/advisories/43104 http://www.kb.cert.org/vuls/id/686084 http://securitytracker.com/id?1024999 http://www.securityfocus.com/bid/46035 http://secunia.com/advisories/43167 http://www.vupen.com/english/advisories/2011/0266 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053644.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:022 http://www.vupen.com/english/advisories/2011/0300 http://secunia.com/advisories/43354 http://www.redhat.com/support/errata/RHSA-2011-0256.html http://www.vupen.com/english/advisories/2011/0400 http://www.vupen.com/english/advisories/2011/0583 http://secunia.com/advisories/43613 http://www.debian.org/security/2011/dsa-2184 https://kb.isc.org/article/AA-00456 https://exchange.xforce.ibmcloud.com/vulnerabilities/64959 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611217 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/686084

CVE-2011-0413

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect