CVE-2012-3954

2012-07-2510:42:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2012-3954

memory leaks

isc dhcp

denial of service

nvd

6.3 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

0.034 Low

EPSS

Percentile

91.3%

JSON

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

CPENameOperatorVersion
isc:dhcpisc dhcpeq4.1.0
isc:dhcpisc dhcpeq4.1.1
isc:dhcpisc dhcpeq4.1.2
isc:dhcpisc dhcpeq4.2.2
isc:dhcpisc dhcpeq4.2.0
isc:dhcpisc dhcpeq4.2.3
isc:dhcpisc dhcpeq4.2.1
isc:dhcpisc dhcpeq4.2.4
isc:dhcpisc dhcpeq4.1-esv
debian:debian_linuxdebian debian linuxeq7.0

CPE	Name	Operator	Version
isc:dhcp	isc dhcp	eq	4.1.0
isc:dhcp	isc dhcp	eq	4.1.1
isc:dhcp	isc dhcp	eq	4.1.2
isc:dhcp	isc dhcp	eq	4.2.2
isc:dhcp	isc dhcp	eq	4.2.0
isc:dhcp	isc dhcp	eq	4.2.3
isc:dhcp	isc dhcp	eq	4.2.1
isc:dhcp	isc dhcp	eq	4.2.4
isc:dhcp	isc dhcp	eq	4.1-esv
debian:debian_linux	debian debian linux	eq	7.0