Lucene search
GoogleOSV:DSA-2516-1HistoryJul 26, 2012 - 12:00 a.m.
isc-dhcp - denial of service
2012-07-2600:00:00
Google
osv.dev
6
6.1 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
Two security vulnerabilities affecting ISC dhcpd, a server for automatic
IP address assignment, in Debian have been discovered.
- CVE-2012-3571
Markus Hietava of the Codenomicon CROSS project discovered that it is
possible to force the server to enter an infinite loop via messages with
malformed client identifiers. - CVE-2012-3954
Glen Eustace discovered that DHCP servers running in DHCPv6 mode
and possibly DHCPv4 mode suffer of memory leaks while processing messages.
An attacker can use this flaw to exhaust resources and perform denial
of service attacks.
For the stable distribution (squeeze), this problem has been fixed in
version 4.1.1-P1-15+squeeze4.
For the testing (wheezy) and unstable (sid) distributions, this problem
will be fixed soon.
We recommend that you upgrade your isc-dhcp packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| isc-dhcp | eq | 4.1.1-P1-15+squeeze3 | |
| isc-dhcp | eq | 4.1.1-P1-15 | |
| isc-dhcp | eq | 4.1.1-P1-15+squeeze2 | |
| isc-dhcp | eq | 4.1.1-P1-15+squeeze1 |
References
Related
nessus
nessus
Oracle Solaris Third-Party Patch Update : isc-dhcp (multiple_denial_of_service_dos4)
2015-01-19 00:00:00
Ubuntu 11.04 / 11.10 / 12.04 LTS : isc-dhcp vulnerabilities (USN-1519-1)
2012-07-27 00:00:00
Debian DSA-2516-1 : isc-dhcp - several vulnerabilities
2012-07-30 00:00:00
openvas
openvas
Ubuntu Update for isc-dhcp USN-1519-1
2012-07-30 00:00:00
CentOS Update for dhclient CESA-2012:1141 centos6
2012-08-03 00:00:00
Ubuntu: Security Advisory (USN-1519-1)
2012-07-30 00:00:00
amazon
amazon
Medium: dhcp
2012-08-03 15:56:00
oraclelinux
oraclelinux
dhcp security update
2012-08-02 00:00:00
dhcp security and bug fix update
2013-02-22 00:00:00
dhcp security update
2012-08-02 00:00:00
redhat
redhat
(RHSA-2012:1141) Moderate: dhcp security update
2012-08-03 00:00:00
(RHSA-2012:1140) Moderate: dhcp security update
2012-08-03 00:00:00
(RHSA-2012:1200) Moderate: rhev-hypervisor6 security and bug fix update
2012-08-23 00:00:00
debian
debian
[SECURITY] [DSA 2516-1] isc-dhcp security update
2012-07-26 11:40:40
[SECURITY] [DSA 2519-1] isc-dhcp security update
2012-08-01 18:34:11
[SECURITY] [DSA 2519-2] isc-dhcp regression
2012-08-04 11:10:27
centos
centos
dhclient, dhcp security update
2012-08-03 04:31:47
dhclient, dhcp, libdhcp4client security update
2012-08-03 04:02:49
ubuntu
ubuntu
DHCP vulnerabilities
2012-07-26 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: dhcp-4.2.4-9.P1.fc17
2012-08-01 18:29:07
[SECURITY] Fedora 17 Update: dhcp-4.2.4-13.P2.fc17
2012-09-26 08:53:17
[SECURITY] Fedora 16 Update: dhcp-4.2.3-11.P2.fc16
2012-08-06 07:51:10
osv
osv
isc-dhcp - denial of service
2012-08-04 00:00:00
isc-dhcp - denial of service
2012-08-04 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:115 ] dhcp
2012-07-29 00:00:00
ISC dhcp multiple security vulnerabilities
2012-09-18 00:00:00
freebsd
freebsd
isc-dhcp -- multiple vulnerabilities
2012-07-24 00:00:00
debiancve
debiancve
CVE-2012-3954
2012-07-25 10:42:00
CVE-2012-3571
2012-07-25 10:42:00
prion
prion
Code injection
2012-07-25 10:42:00
Design/Logic Flaw
2012-07-25 10:42:00
cve
cve
CVE-2012-3954
2012-07-25 10:42:00
CVE-2012-3571
2012-07-25 10:42:00
ubuntucve
ubuntucve
CVE-2012-3954
2012-07-25 00:00:00
CVE-2012-3571
2012-07-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:55:22
packetstorm
packetstorm
SC DHCP 4.1.2 Denial Of Service
2012-07-29 00:00:00
slackware
slackware
[slackware-security] dhcp
2012-08-24 22:54:35
gentoo
gentoo
ISC DHCP: Denial of service
2013-01-09 00:00:00
6.1 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
Related for OSV:DSA-2516-1