CVE-2011-4539 dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash...
MediumCVSS 5.0
EPSS 15.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/isc-dhcp(Debian:12) | < 4.2.2.dfsg.1-5 | 4.2.2.dfsg.1-5 |
| debian/isc-dhcp(Debian:13) | < 4.2.2.dfsg.1-5 | 4.2.2.dfsg.1-5 |
| isc dhcp | = 4.0 | No fix listed |
| isc dhcp | = 4.0.0 | No fix listed |
| isc dhcp | = 4.0.1 | No fix listed |
| isc dhcp | = 4.0.1-b1 | No fix listed |
| isc dhcp | = 4.0.1-rc1 | No fix listed |
| isc dhcp | = 4.0.2 | No fix listed |
| isc dhcp | = 4.0.2-b1 | No fix listed |
| isc dhcp | = 4.0.2-b2 | No fix listed |
| isc dhcp | = 4.0.2-b3 | No fix listed |
| isc dhcp | = 4.0.2-rc1 | No fix listed |
| isc dhcp | = 4.0.3 | No fix listed |
| isc dhcp | = 4.0.3-b1 | No fix listed |
| isc dhcp | = 4.0.3-rc1 | No fix listed |
| isc dhcp | = 4.1.1-b3 | No fix listed |
| isc dhcp | = 4.1.1-rc1 | No fix listed |
| isc dhcp | = 4.1.2 | No fix listed |
| isc dhcp | = 4.2.0 | No fix listed |
| isc dhcp | = 4.2.0-a1 | No fix listed |
| isc dhcp | = 4.2.0-a2 | No fix listed |
| isc dhcp | = 4.2.0-b1 | No fix listed |
| isc dhcp | = 4.2.0-b2 | No fix listed |
| isc dhcp | = 4.2.0-p1 | No fix listed |
| isc dhcp | = 4.2.0-rc1 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 4.2.1 | No fix listed |
| isc dhcp | = 4.2.1-b1 | No fix listed |
| isc dhcp | = 4.2.1-rc1 | No fix listed |
| isc dhcp | = 4.2.2 | No fix listed |
| isc dhcp | = 4.2.2-b1 | No fix listed |
| isc dhcp | = 4.2.2-rc1 | No fix listed |
| isc dhcp | = 4.2.3 | No fix listed |
| isc dhcp | = 4.1-esv | No fix listed |
| isc dhcp | = 4.1-esv-r1 | No fix listed |
| isc dhcp | = 4.1-esv-r2 | No fix listed |
| isc dhcp | = 4.1-esv-r3 | No fix listed |
| isc dhcp | = 4.1-esv-r3_b1 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2011-4539 vendor-advisory
- FEDORA-2011-16981 mailing-list third-party-advisory vendor-advisory
- FEDORA-2011-16976 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2011:1318 mailing-list third-party-advisory vendor-advisory
- 47153 third-party-advisory
- 47178 third-party-advisory
- GLSA-201301-06 third-party-advisory vendor-advisory
- DSA-2519 third-party-advisory vendor-advisory
- MDVSA-2011:182 third-party-advisory vendor-advisory
- 50971 third-party-advisory vdb-entry
- 1026393 third-party-advisory vdb-entry
- USN-1309-1 third-party-advisory vendor-advisory
- isc-dhcp-dhcpd-regex-dos(71680) third-party-advisory vdb-entry
- www.isc.org vendor-advisory
- bugs.debian.org issue-tracking