Lucene search
AmazonALAS-2012-031HistoryJan 05, 2012 - 8:58 p.m.
Medium: dhcp
2012-01-0520:58:00
alas.aws.amazon.com
14
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.02 Low
EPSS
Percentile
88.7%
Issue Overview:
A denial of service flaw was found in the way the dhcpd daemon handled DHCP request packets when regular expression matching was used in “/etc/dhcp/dhcpd.conf”. A remote attacker could use this flaw to crash dhcpd. (CVE-2011-4539)
Affected Packages:
dhcp
Issue Correction:
Run yum update dhcp to update your system.
New Packages:
i686:
dhcp-devel-4.1.1-25.P1.14.amzn1.i686
dhclient-4.1.1-25.P1.14.amzn1.i686
dhcp-4.1.1-25.P1.14.amzn1.i686
dhcp-debuginfo-4.1.1-25.P1.14.amzn1.i686
dhcp-common-4.1.1-25.P1.14.amzn1.i686
src:
dhcp-4.1.1-25.P1.14.amzn1.src
x86_64:
dhcp-4.1.1-25.P1.14.amzn1.x86_64
dhclient-4.1.1-25.P1.14.amzn1.x86_64
dhcp-devel-4.1.1-25.P1.14.amzn1.x86_64
dhcp-common-4.1.1-25.P1.14.amzn1.x86_64
dhcp-debuginfo-4.1.1-25.P1.14.amzn1.x86_64
Additional References
Red Hat: CVE-2011-4539
Mitre: CVE-2011-4539
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | dhcp-devel | < 4.1.1-25.P1.14.amzn1 | dhcp-devel-4.1.1-25.P1.14.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | dhclient | < 4.1.1-25.P1.14.amzn1 | dhclient-4.1.1-25.P1.14.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | dhcp | < 4.1.1-25.P1.14.amzn1 | dhcp-4.1.1-25.P1.14.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | dhcp-debuginfo | < 4.1.1-25.P1.14.amzn1 | dhcp-debuginfo-4.1.1-25.P1.14.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | dhcp-common | < 4.1.1-25.P1.14.amzn1 | dhcp-common-4.1.1-25.P1.14.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | dhcp | < 4.1.1-25.P1.14.amzn1 | dhcp-4.1.1-25.P1.14.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | dhclient | < 4.1.1-25.P1.14.amzn1 | dhclient-4.1.1-25.P1.14.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | dhcp-devel | < 4.1.1-25.P1.14.amzn1 | dhcp-devel-4.1.1-25.P1.14.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | dhcp-common | < 4.1.1-25.P1.14.amzn1 | dhcp-common-4.1.1-25.P1.14.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | dhcp-debuginfo | < 4.1.1-25.P1.14.amzn1 | dhcp-debuginfo-4.1.1-25.P1.14.amzn1.x86_64.rpm |
Related
redhat
redhat
(RHSA-2011:1819) Moderate: dhcp security update
2011-12-14 00:00:00
(RHSA-2011:1850) Important: rhev-hypervisor6 security and bug fix update
2011-12-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:07:23
openvas
openvas
Ubuntu: Security Advisory (USN-1309-1)
2011-12-16 00:00:00
FreeBSD Ports: isc-dhcp42-server
2012-02-13 00:00:00
Mandriva Update for dhcp MDVSA-2011:182 (dhcp)
2011-12-09 00:00:00
securityvulns
securityvulns
ISC DHCP DoS
2011-12-11 00:00:00
nessus
nessus
openSUSE Security Update : dhcp (openSUSE-2011-68)
2014-06-13 00:00:00
Oracle Solaris Third-Party Patch Update : isc-dhcp (cve_2011_4539_denial_of)
2015-01-19 00:00:00
prion
prion
Design/Logic Flaw
2011-12-08 11:55:00
fedora
fedora
[SECURITY] Fedora 16 Update: dhcp-4.2.3-4.P1.fc16
2011-12-14 23:32:30
[SECURITY] Fedora 16 Update: dhcp-4.2.3-5.P2.fc16
2012-01-22 05:25:38
[SECURITY] Fedora 15 Update: dhcp-4.2.1-14.P1.fc15
2012-01-02 21:49:27
ubuntucve
ubuntucve
CVE-2011-4539
2011-12-08 00:00:00
freebsd
freebsd
isc-dhcp-server -- Remote DoS
2011-12-07 00:00:00
cve
cve
CVE-2011-4539
2011-12-08 11:55:00
debiancve
debiancve
CVE-2011-4539
2011-12-08 11:55:00
oraclelinux
oraclelinux
dhcp security update
2011-12-16 00:00:00
centos
centos
dhclient, dhcp security update
2011-12-22 15:44:59
ubuntu
ubuntu
DHCP vulnerability
2011-12-15 00:00:00
debian
debian
[SECURITY] [DSA 2519-1] isc-dhcp security update
2012-08-01 18:34:11
[SECURITY] [DSA 2519-2] isc-dhcp regression
2012-08-04 11:10:27
slackware
slackware
[slackware-security] dhcp
2012-08-24 22:54:35
osv
osv
isc-dhcp - denial of service
2012-08-04 00:00:00
isc-dhcp - denial of service
2012-08-04 00:00:00
gentoo
gentoo
ISC DHCP: Denial of service
2013-01-09 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.02 Low
EPSS
Percentile
88.7%
Related for ALAS-2012-031