Lucene search

K
amazonAmazonALAS-2013-157
HistoryMar 02, 2013 - 4:47 p.m.

Low: dhcp

2013-03-0216:47:00
alas.aws.amazon.com
12

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.021 Low

EPSS

Percentile

88.9%

Issue Overview:

A flaw was found in the way the dhcpd daemon handled the expiration time of IPv6 leases. If dhcpd’s configuration was changed to reduce the default IPv6 lease time, lease renewal requests for previously assigned leases could cause dhcpd to crash. (CVE-2012-3955)

Affected Packages:

dhcp

Issue Correction:
Run yum update dhcp to update your system.

New Packages:

i686:  
    dhcp-debuginfo-4.1.1-34.P1.18.amzn1.i686  
    dhcp-common-4.1.1-34.P1.18.amzn1.i686  
    dhcp-4.1.1-34.P1.18.amzn1.i686  
    dhclient-4.1.1-34.P1.18.amzn1.i686  
    dhcp-devel-4.1.1-34.P1.18.amzn1.i686  
  
src:  
    dhcp-4.1.1-34.P1.18.amzn1.src  
  
x86_64:  
    dhcp-common-4.1.1-34.P1.18.amzn1.x86_64  
    dhclient-4.1.1-34.P1.18.amzn1.x86_64  
    dhcp-4.1.1-34.P1.18.amzn1.x86_64  
    dhcp-debuginfo-4.1.1-34.P1.18.amzn1.x86_64  
    dhcp-devel-4.1.1-34.P1.18.amzn1.x86_64  

Additional References

Red Hat: CVE-2012-3955

Mitre: CVE-2012-3955

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.021 Low

EPSS

Percentile

88.9%