CVE-2003-0039 ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadca...
MediumCVSS 5.0
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcpd | = 3.0.1-rc1 | No fix listed |
| isc dhcpd | = 3.0.1-rc10 | No fix listed |
| isc dhcpd | = 3.0.1-rc2 | No fix listed |
| isc dhcpd | = 3.0.1-rc3 | No fix listed |
| isc dhcpd | = 3.0.1-rc4 | No fix listed |
| isc dhcpd | = 3.0.1-rc5 | No fix listed |
| isc dhcpd | = 3.0.1-rc6 | No fix listed |
| isc dhcpd | = 3.0.1-rc7 | No fix listed |
| isc dhcpd | = 3.0.1-rc8 | No fix listed |
| isc dhcpd | = 3.0.1-rc9 | No fix listed |
References
- TLSA-2003-26 vendor-advisory
- CLSA-2003:616 vendor-advisory
- 20030115 DoS against DHCP infrastructure with isc dhcrelay mailing-list
- DSA-245 patch vendor-advisory
- VU#149953 third-party-advisory us-government-resource
- 20030219 [OpenPKG-SA-2003.012] OpenPKG Security Advisory (dhcpd) mailing-list
- RHSA-2003:034 vendor-advisory
- 6628 vdb-entry
- dhcp-dhcrelay-dos(11187) vdb-entry