UbuntuUSN-2868-1DHCP vulnerability
6.5 Medium
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
5.7 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:N/I:N/A:C
0.051 Low
EPSS
Percentile
92.9%
Releases
- Ubuntu 15.10
- Ubuntu 15.04
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- isc-dhcp - DHCP server and client
Details
Sebastian Poehn discovered that the DHCP server, client, and relay
incorrectly handled certain malformed UDP packets. A remote attacker could
use this issue to cause the DHCP server, client, or relay to stop
responding, resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.10 | noarch | isc-dhcp-client | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-client-dbg | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-client-dbgsym | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-client-udeb | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-client-udeb-dbgsym | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-common | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-common-dbgsym | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-dbg | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-dev | < 4.3.1-5ubuntu3.1 | UNKNOWN |
| Ubuntu | 15.10 | noarch | isc-dhcp-relay | < 4.3.1-5ubuntu3.1 | UNKNOWN |
References
Related
6.5 Medium
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
5.7 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:N/I:N/A:C
0.051 Low
EPSS
Percentile
92.9%