5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.073 Low
EPSS
Percentile
94.0%
ISC DHCP is the reference implementation of the Dynamic Host Configuration Protocol as specified in RFC 2131.
Christoph Biedl discovered that dhcpd does not properly handle certain DHCP requests when configured both using “dhcp-client-identifier” and “hardware ethernet”.
A remote attacker might send a specially crafted request to dhcpd, possibly resulting in a Denial of Service (daemon crash).
There is no known workaround at this time.
All ISC DHCP users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/dhcp-3.1.2_p1"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | net-misc/dhcp | < 3.1.2_p1 | UNKNOWN |