Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3954
HistoryJul 25, 2012 - 12:00 a.m.

CVE-2012-3954

2012-07-2500:00:00
ubuntu.com
ubuntu.com
14
isc dhcp 4.1.x
isc dhcp 4.2.x
memory leaks
denial of service
remote attackers

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.034

Percentile

91.4%

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and
4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of
service (memory consumption) by sending many requests.

Notes

Author Note
mdeslaur 3.x isn’t affected
OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchisc-dhcp< 4.1.1-P1-15ubuntu9.4UNKNOWN
ubuntu11.10noarchisc-dhcp< 4.1.1-P1-17ubuntu10.3UNKNOWN
ubuntu12.04noarchisc-dhcp< 4.1.ESV-R4-0ubuntu5.2UNKNOWN

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.034

Percentile

91.4%