Published: 15/08/2011 Updated: 08/01/2020

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The server in ISC DHCP 3.x and 4.x prior to 4.2.2, 3.1-ESV prior to 3.1-ESV-R3, and 4.1-ESV prior to 4.1-ESV-R3 allows remote malicious users to cause a denial of service (daemon exit) via a crafted DHCP packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
isc dhcp 3.0
isc dhcp 3.0.1
isc dhcp 3.0.2
isc dhcp 3.0.3
isc dhcp 3.0.4
isc dhcp 3.0.5
isc dhcp 3.0.6
isc dhcp 3.1
isc dhcp 3.1-esv
isc dhcp 3.1.0
isc dhcp 3.1.1
isc dhcp 3.1.2
isc dhcp 3.1.3
isc dhcp 4.0
isc dhcp 4.0-esv
isc dhcp 4.0.0
isc dhcp 4.0.1
isc dhcp 4.0.2
isc dhcp 4.0.3
isc dhcp 4.1-esv
isc dhcp 4.1.0
isc dhcp 4.1.1
isc dhcp 4.1.2
isc dhcp 4.2.0
isc dhcp 4.2.1
canonical ubuntu linux 8.04
canonical ubuntu linux 10.04
canonical ubuntu linux 10.10
canonical ubuntu linux 11.04
debian debian linux 5.0
debian debian linux 6.0
debian debian linux 7.0

Debian Bug report logs - #638404 isc-dhcp: two denial-of-service issues Package: isc-dhcp; Maintainer for isc-dhcp is Debian ISC DHCP Maintainers <isc-dhcp@packagesdebianorg>; Reported by: Michael Gilbert <michaelsgilbert@gmailcom> Date: Fri, 19 Aug 2011 03:54:01 UTC Severity: important Tags: security Found in ...

An attacker could send crafted input to DHCP and cause it to crash ...

David Zych discovered that the ISC DHCP crashes when processing certain packets, leading to a denial of service For the oldstable distribution (lenny), this problem has been fixed in version 311-6+lenny6 of the dhcp3 package For the stable distribution (squeeze), this problem has been fixed in version 411-P1-15+squeeze3 of the isc-dhcp packag ...

CWE-20 https://bugzilla.redhat.com/attachment.cgi?id=517665&action=diff http://securitytracker.com/id?1025918 http://www.isc.org/files/release-notes/DHCP%204.2.2_0.html http://www.isc.org/files/release-notes/DHCP%204.1-ESV-R3.html http://www.isc.org/software/dhcp/advisories/cve-2011-2748 http://www.securityfocus.com/bid/49120 http://www.isc.org/files/release-notes/DHCP%203.1-ESV-R3_0.html https://bugzilla.redhat.com/show_bug.cgi?id=729382 http://www.ubuntu.com/usn/USN-1190-1 http://secunia.com/advisories/45639 http://secunia.com/advisories/45582 http://secunia.com/advisories/45629 http://www.redhat.com/support/errata/RHSA-2011-1160.html http://www.debian.org/security/2011/dsa-2292 http://secunia.com/advisories/45595 https://hermes.opensuse.org/messages/11695711 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html http://secunia.com/advisories/45817 http://secunia.com/advisories/45918 http://www.mandriva.com/security/advisories?name=MDVSA-2011:128 http://secunia.com/advisories/46780 http://redmine.pfsense.org/issues/1888 http://security.gentoo.org/glsa/glsa-201301-06.xml http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 https://exchange.xforce.ibmcloud.com/vulnerabilities/69139 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638404 https://usn.ubuntu.com/1190-1/https://nvd.nist.gov

CVE-2011-2748

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect