CVE-2011-4868 The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attac...
MediumCVSS 6.1
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/isc-dhcp(Debian:12) | < 4.2.2.dfsg.1-5 | 4.2.2.dfsg.1-5 |
| debian/isc-dhcp(Debian:13) | < 4.2.2.dfsg.1-5 | 4.2.2.dfsg.1-5 |
| isc dhcp | <= 4.2.3 | No fix listed |
| isc dhcp | = 3.0 | No fix listed |
| isc dhcp | = 3.0-beta2 | No fix listed |
| isc dhcp | = 3.0-rc1 | No fix listed |
| isc dhcp | = 3.0-rc10 | No fix listed |
| isc dhcp | = 3.0-rc11 | No fix listed |
| isc dhcp | = 3.0-rc12 | No fix listed |
| isc dhcp | = 3.0-rc2 | No fix listed |
| isc dhcp | = 3.0-rc3 | No fix listed |
| isc dhcp | = 3.0-rc4 | No fix listed |
| isc dhcp | = 3.0-rc5 | No fix listed |
| isc dhcp | = 3.0-rc6 | No fix listed |
| isc dhcp | = 3.0-rc7 | No fix listed |
| isc dhcp | = 3.0-rc8 | No fix listed |
| isc dhcp | = 3.0-rc9 | No fix listed |
| isc dhcp | = 3.0.1 | No fix listed |
| isc dhcp | = 3.0.1-rc1 | No fix listed |
| isc dhcp | = 3.0.1-rc10 | No fix listed |
| isc dhcp | = 3.0.1-rc11 | No fix listed |
| isc dhcp | = 3.0.1-rc12 | No fix listed |
| isc dhcp | = 3.0.1-rc13 | No fix listed |
| isc dhcp | = 3.0.1-rc14 | No fix listed |
| isc dhcp | = 3.0.1-rc2 | No fix listed |
Show 54 more
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 3.0.1-rc3 | No fix listed |
| isc dhcp | = 3.0.1-rc4 | No fix listed |
| isc dhcp | = 3.0.1-rc5 | No fix listed |
| isc dhcp | = 3.0.1-rc6 | No fix listed |
| isc dhcp | = 3.0.1-rc7 | No fix listed |
| isc dhcp | = 3.0.1-rc8 | No fix listed |
| isc dhcp | = 3.0.1-rc9 | No fix listed |
| isc dhcp | = 3.0.2 | No fix listed |
| isc dhcp | = 3.0.2-b1 | No fix listed |
| isc dhcp | = 3.0.2-rc1 | No fix listed |
| isc dhcp | = 3.0.2-rc2 | No fix listed |
| isc dhcp | = 3.0.2-rc3 | No fix listed |
| isc dhcp | = 3.0.3 | No fix listed |
| isc dhcp | = 3.0.3-b1 | No fix listed |
| isc dhcp | = 3.0.3-b2 | No fix listed |
| isc dhcp | = 3.0.3-b3 | No fix listed |
| isc dhcp | = 3.0.4 | No fix listed |
| isc dhcp | = 3.0.4-b1 | No fix listed |
| isc dhcp | = 3.0.4-b2 | No fix listed |
| isc dhcp | = 3.0.4-b3 | No fix listed |
| isc dhcp | = 3.0.4-rc1 | No fix listed |
| isc dhcp | = 3.0.5 | No fix listed |
| isc dhcp | = 3.0.5-rc1 | No fix listed |
| isc dhcp | = 3.0.6-rc1 | No fix listed |
| isc dhcp | = 3.1.0 | No fix listed |
| isc dhcp | = 3.1.0-a1 | No fix listed |
| isc dhcp | = 3.1.0-a2 | No fix listed |
| isc dhcp | = 3.1.0-a3 | No fix listed |
| isc dhcp | = 3.1.0-b1 | No fix listed |
| isc dhcp | = 3.1.0-b2 | No fix listed |
| isc dhcp | = 4.0.0 | No fix listed |
| isc dhcp | = 4.0.0-a1 | No fix listed |
| isc dhcp | = 4.0.0-a2 | No fix listed |
| isc dhcp | = 4.0.0-a3 | No fix listed |
| isc dhcp | = 4.0.0-b1 | No fix listed |
| isc dhcp | = 4.0.0-b2 | No fix listed |
| isc dhcp | = 4.0.0-b3 | No fix listed |
| isc dhcp | = 4.1.0 | No fix listed |
| isc dhcp | = 4.1.0-a1 | No fix listed |
| isc dhcp | = 4.1.0-a2 | No fix listed |
| isc dhcp | = 4.1.0-b1 | No fix listed |
| isc dhcp | = 4.2.0 | No fix listed |
| isc dhcp | = 4.2.0-a1 | No fix listed |
| isc dhcp | = 4.2.0-a2 | No fix listed |
| isc dhcp | = 4.2.0-b1 | No fix listed |
| isc dhcp | = 4.2.0-b2 | No fix listed |
| isc dhcp | = 4.2.0-rc1 | No fix listed |
| isc dhcp | = 4.2.1 | No fix listed |
| isc dhcp | = 4.2.1-b1 | No fix listed |
| isc dhcp | = 4.2.1-rc1 | No fix listed |
| isc dhcp | = 4.2.2 | No fix listed |
| isc dhcp | = 4.2.2-b1 | No fix listed |
| isc dhcp | = 4.2.2-rc1 | No fix listed |
| isc dhcp | = 4.2.3 | No fix listed |
References
- Debian Security Tracker CVE-2011-4868 vendor-advisory
- GLSA-201301-06 vendor-advisory
- deepthought.isc.org
- kb.isc.org
- www.isc.org vendor-advisory
- bugs.debian.org issue-tracking