CVE-2012-3954 Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.
LowCVSS 3.3
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/isc-dhcp(Debian:12) | < 4.2.4-2 | 4.2.4-2 |
| debian/isc-dhcp(Debian:13) | < 4.2.4-2 | 4.2.4-2 |
| isc dhcp | = 4.1.0 | No fix listed |
| isc dhcp | = 4.1.0-a1 | No fix listed |
| isc dhcp | = 4.1.0-a2 | No fix listed |
| isc dhcp | = 4.1.0-b1 | No fix listed |
| isc dhcp | = 4.1.1 | No fix listed |
| isc dhcp | = 4.1.1-b1 | No fix listed |
| isc dhcp | = 4.1.1-b2 | No fix listed |
| isc dhcp | = 4.1.1-b3 | No fix listed |
| isc dhcp | = 4.1.1-rc1 | No fix listed |
| isc dhcp | = 4.1.2 | No fix listed |
| isc dhcp | = 4.1.2-b1 | No fix listed |
| isc dhcp | = 4.1.2-p1 | No fix listed |
| isc dhcp | = 4.1.2-rc1 | No fix listed |
| isc dhcp | = 4.2.0 | No fix listed |
| isc dhcp | = 4.2.0-a1 | No fix listed |
| isc dhcp | = 4.2.0-a2 | No fix listed |
| isc dhcp | = 4.2.0-b1 | No fix listed |
| isc dhcp | = 4.2.0-b2 | No fix listed |
| isc dhcp | = 4.2.0-p1 | No fix listed |
| isc dhcp | = 4.2.0-rc1 | No fix listed |
| isc dhcp | = 4.2.1 | No fix listed |
| isc dhcp | = 4.2.1-b1 | No fix listed |
| isc dhcp | = 4.2.1-rc1 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 4.2.2 | No fix listed |
| isc dhcp | = 4.2.2-b1 | No fix listed |
| isc dhcp | = 4.2.2-rc1 | No fix listed |
| isc dhcp | = 4.2.3 | No fix listed |
| isc dhcp | = 4.2.3-p1 | No fix listed |
| isc dhcp | = 4.2.3-p2 | No fix listed |
| isc dhcp | = 4.2.4 | No fix listed |
| isc dhcp | = 4.1-esv | No fix listed |
| isc dhcp | = 4.1-esv-r1 | No fix listed |
| isc dhcp | = 4.1-esv-r2 | No fix listed |
| isc dhcp | = 4.1-esv-r3 | No fix listed |
| isc dhcp | = 4.1-esv-r3_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r4 | No fix listed |
| isc dhcp | = 4.1-esv-r5 | No fix listed |
| isc dhcp | = 4.1-esv-r5_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc2 | No fix listed |
| isc dhcp | = 4.1-esv-rc1 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
References
- Debian Security Tracker CVE-2012-3954 vendor-advisory
- openSUSE-SU-2012:1006 mailing-list third-party-advisory vendor-advisory
- RHSA-2012:1141 third-party-advisory vendor-advisory
- GLSA-201301-06 third-party-advisory vendor-advisory
- DSA-2516 third-party-advisory vendor-advisory
- DSA-2519 third-party-advisory vendor-advisory
- MDVSA-2012:115 third-party-advisory vendor-advisory
- MDVSA-2012:116 third-party-advisory vendor-advisory
- 54665 third-party-advisory vdb-entry
- 1027300 third-party-advisory vdb-entry
- USN-1519-1 third-party-advisory vendor-advisory
- kb.isc.org vendor-advisory
- bugs.debian.org issue-tracking