CVE-2010-3616 ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss)....
MediumCVSS 5.0
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 4.2.0 | No fix listed |
| isc dhcp | = 4.2.0-p1 | No fix listed |
References
- FEDORA-2010-18856 vendor-advisory
- 42618 third-party-advisory vendor-advisory
- 42682 third-party-advisory
- VU#159528 third-party-advisory us-government-resource
- MDVSA-2011:001 vendor-advisory
- 45360 vdb-entry
- 1024862 vdb-entry
- ADV-2010-3208 vdb-entry vendor-advisory
- ADV-2011-0052 vdb-entry
- [dhcp-users] 20101207 nagios check_tcp kills failover, then dhcp failure. mailing-list
- www.isc.org vendor-advisory
- Debian Security Tracker CVE-2010-3616 vendor-advisory