CVE-2010-2156 ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
MediumCVSS 5.0
EPSS 76.2%
Framework module
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 4.1.0 | No fix listed |
| isc dhcp | = 4.1.1 | No fix listed |
| isc dhcp | = 4.1.1-b1 | No fix listed |
| isc dhcp | = 4.1.1-b2 | No fix listed |
| isc dhcp | = 4.1.1-b3 | No fix listed |
| isc dhcp | = 4.1.1-rc1 | No fix listed |
| isc dhcp | = 4.0.0 | No fix listed |
| isc dhcp | = 4.0.1 | No fix listed |
| isc dhcp | = 4.0.1-b1 | No fix listed |
| isc dhcp | = 4.0.1-rc1 | No fix listed |
| isc dhcp | = 4.0.2 | No fix listed |
| isc dhcp | = 4.0.2-b1 | No fix listed |
| isc dhcp | = 4.0.2-b2 | No fix listed |
| isc dhcp | = 4.0.2-b3 | No fix listed |
| isc dhcp | = 4.0.2-rc1 | No fix listed |
| debian/isc-dhcp(Debian:12) | < 4.1.1-P1-1 | 4.1.1-P1-1 |
| debian/isc-dhcp(Debian:13) | < 4.1.1-P1-1 | 4.1.1-P1-1 |
References
- Debian Security Tracker CVE-2010-2156 vendor-advisory
- ftp.isc.org
- ftp.isc.org
- FEDORA-2010-9433 vendor-advisory
- 40116 third-party-advisory
- 14185 exploit
- MDVSA-2010:114 vendor-advisory
- 40775 vdb-entry
- 1024093 vdb-entry
- dhcp-zero-length-dos(59222) vdb-entry