PT-2012-1169 · Isc+3 · Isc Dhcp+3

Glen Eustace · Publicado 2012-09-14 · Atualizado 2024-06-15 · CVE-2012-3955

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC DHCP versions 4.1.x through 4.1-ESV-R6 ISC DHCP versions 4.2.x through 4.2.4-P1

Description The issue allows remote attackers to cause a denial of service, potentially disrupting the availability of protected information. This can be achieved by establishing an IPv6 lease in an environment where the lease expiration time is later reduced, leading to opportunistic circumstances that may cause the daemon to crash.

Recommendations For ISC DHCP versions 4.1.x through 4.1-ESV-R6, update to version 4.1-ESV-R7 or later. For ISC DHCP versions 4.2.x through 4.2.4-P1, update to version 4.2.4-P2 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-09699

CESA-2013_0504

CVE-2012-3955

DSA-2551-1

OPENSUSE-SU-2024:10358-1

RHSA-2013:0504

RHSA-2013_0504

SUSE-SU-2012_1327-1

Produtos afetados

Centos

Isc Dhcp

Red Hat

Suse

Referências · 56

• https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-3955 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-3611 · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2013-February/026771.html · Nota
• https://suse.com/security/cve/CVE-2011-4868 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2012:153 · Aviso do Fabricante
• https://kb.isc.org/article/AA-00779 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-3616 · Nota
• http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html · Aviso do Fabricante
• http://debian.org/security/2012/dsa-2551 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09699 · Nota de Segurança
• http://securityfocus.com/bid/55530 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3955 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html · Aviso do Fabricante