CVE-2012-3570 Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifie...
MediumCVSS 5.7
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/isc-dhcp(Debian:12) | < 4.2.4-2 | 4.2.4-2 |
| debian/isc-dhcp(Debian:13) | < 4.2.4-2 | 4.2.4-2 |
| isc dhcp | = 4.2.0 | No fix listed |
| isc dhcp | = 4.2.0-a1 | No fix listed |
| isc dhcp | = 4.2.0-a2 | No fix listed |
| isc dhcp | = 4.2.0-b1 | No fix listed |
| isc dhcp | = 4.2.0-b2 | No fix listed |
| isc dhcp | = 4.2.0-p1 | No fix listed |
| isc dhcp | = 4.2.0-rc1 | No fix listed |
| isc dhcp | = 4.2.1 | No fix listed |
| isc dhcp | = 4.2.1-b1 | No fix listed |
| isc dhcp | = 4.2.1-rc1 | No fix listed |
| isc dhcp | = 4.2.2 | No fix listed |
| isc dhcp | = 4.2.2-b1 | No fix listed |
| isc dhcp | = 4.2.2-rc1 | No fix listed |
| isc dhcp | = 4.2.3 | No fix listed |
| isc dhcp | = 4.2.3-p1 | No fix listed |
| isc dhcp | = 4.2.3-p2 | No fix listed |
| isc dhcp | = 4.2.4 | No fix listed |
References
- Debian Security Tracker CVE-2012-3570 vendor-advisory
- openSUSE-SU-2012:1006 vendor-advisory
- GLSA-201301-06 vendor-advisory
- MDVSA-2012:115 vendor-advisory
- 54665 vdb-entry
- kb.isc.org vendor-advisory
- bugs.debian.org issue-tracking