CVE-2012-3571 ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.
MediumCVSS 6.1
EPSS 13.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/isc-dhcp(Debian:12) | < 4.2.4-2 | 4.2.4-2 |
| debian/isc-dhcp(Debian:13) | < 4.2.4-2 | 4.2.4-2 |
| isc dhcp | = 4.1.2 | No fix listed |
| isc dhcp | = 4.2.0 | No fix listed |
| isc dhcp | = 4.2.0-a1 | No fix listed |
| isc dhcp | = 4.2.0-a2 | No fix listed |
| isc dhcp | = 4.2.0-b1 | No fix listed |
| isc dhcp | = 4.2.0-b2 | No fix listed |
| isc dhcp | = 4.2.0-p1 | No fix listed |
| isc dhcp | = 4.2.0-rc1 | No fix listed |
| isc dhcp | = 4.2.1 | No fix listed |
| isc dhcp | = 4.2.1-b1 | No fix listed |
| isc dhcp | = 4.2.1-rc1 | No fix listed |
| isc dhcp | = 4.2.2 | No fix listed |
| isc dhcp | = 4.2.2-b1 | No fix listed |
| isc dhcp | = 4.2.2-rc1 | No fix listed |
| isc dhcp | = 4.2.3 | No fix listed |
| isc dhcp | = 4.2.3-p1 | No fix listed |
| isc dhcp | = 4.2.3-p2 | No fix listed |
| isc dhcp | = 4.2.4 | No fix listed |
| isc dhcp | = 4.1-esv | No fix listed |
| isc dhcp | = 4.1-esv-r1 | No fix listed |
| isc dhcp | = 4.1-esv-r2 | No fix listed |
| isc dhcp | = 4.1-esv-r3 | No fix listed |
| isc dhcp | = 4.1-esv-r3_b1 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 4.1-esv-r4 | No fix listed |
| isc dhcp | = 4.1-esv-r5 | No fix listed |
| isc dhcp | = 4.1-esv-r5_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc2 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2012-3571 vendor-advisory
- bugs.debian.org issue-tracking
- kb.juniper.net third-party-advisory
- openSUSE-SU-2012:1006 mailing-list third-party-advisory vendor-advisory
- RHSA-2012:1140 third-party-advisory vendor-advisory
- RHSA-2012:1141 third-party-advisory vendor-advisory
- GLSA-201301-06 third-party-advisory vendor-advisory
- DSA-2516 third-party-advisory vendor-advisory
- DSA-2519 third-party-advisory vendor-advisory
- MDVSA-2012:115 third-party-advisory vendor-advisory
- MDVSA-2012:116 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- 54665 third-party-advisory vdb-entry
- USN-1519-1 third-party-advisory vendor-advisory
- kb.isc.org vendor-advisory