CVE-2012-3955 ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an enviro...
HighCVSS 7.1
EPSS 21.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/isc-dhcp(Debian:12) | < 4.2.4-2 | 4.2.4-2 |
| debian/isc-dhcp(Debian:13) | < 4.2.4-2 | 4.2.4-2 |
| isc dhcp | = 4.1-esv | No fix listed |
| isc dhcp | = 4.1-esv-r1 | No fix listed |
| isc dhcp | = 4.1-esv-r2 | No fix listed |
| isc dhcp | = 4.1-esv-r3 | No fix listed |
| isc dhcp | = 4.1-esv-r3_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r4 | No fix listed |
| isc dhcp | = 4.1-esv-r5 | No fix listed |
| isc dhcp | = 4.1-esv-r5_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc2 | No fix listed |
| isc dhcp | = 4.1-esv-r6 | No fix listed |
| isc dhcp | = 4.1-esv-rc1 | No fix listed |
| isc dhcp | = 4.1.0 | No fix listed |
| isc dhcp | = 4.1.0-a1 | No fix listed |
| isc dhcp | = 4.1.0-a2 | No fix listed |
| isc dhcp | = 4.1.0-b1 | No fix listed |
| isc dhcp | = 4.1.1 | No fix listed |
| isc dhcp | = 4.1.1-b1 | No fix listed |
| isc dhcp | = 4.1.1-b2 | No fix listed |
| isc dhcp | = 4.1.1-b3 | No fix listed |
| isc dhcp | = 4.1.1-rc1 | No fix listed |
| isc dhcp | = 4.1.2 | No fix listed |
| isc dhcp | = 4.1.2-b1 | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 4.1.2-p1 | No fix listed |
| isc dhcp | = 4.1.2-rc1 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
References
- Debian Security Tracker CVE-2012-3955 vendor-advisory
- FEDORA-2012-14076 third-party-advisory vendor-advisory
- FEDORA-2012-13910 third-party-advisory vendor-advisory
- FEDORA-2012-14149 third-party-advisory vendor-advisory
- openSUSE-SU-2012:1234 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:1252 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:1254 mailing-list third-party-advisory vendor-advisory
- RHSA-2013:0504 third-party-advisory vendor-advisory
- 51318 third-party-advisory
- GLSA-201301-06 third-party-advisory vendor-advisory
- DSA-2551 third-party-advisory vendor-advisory
- MDVSA-2012:153 third-party-advisory vendor-advisory
- 55530 third-party-advisory vdb-entry
- 1027528 third-party-advisory vdb-entry
- USN-1571-1 third-party-advisory vendor-advisory
- blogs.oracle.com third-party-advisory
- kb.isc.org vendor-advisory