Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4868
HistoryJan 15, 2012 - 12:00 a.m.

CVE-2011-4868

2012-01-1500:00:00
ubuntu.com
ubuntu.com
10

6.1 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

78.8%

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using
Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the
DHCPv6 lease structure, which allows remote attackers to cause a denial of
service (NULL pointer dereference and daemon crash) via crafted packets
related to a lease-status update.

Notes

Author Note
mdeslaur vulnerable code was added in 4.2.2, and fixed in 4.2.3-P2

6.1 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

78.8%