PT-2010-4955 · Isc+1 · Isc Dhcp Server+1

Published 2010-11-04 · Updated 2024-06-15 · CVE-2010-3611

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC DHCP server versions 4.0 through 4.0.1 ISC DHCP server versions 4.1 through 4.1.1 ISC DHCP server versions 4.2 through 4.2.0

Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by sending a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.

Recommendations For ISC DHCP server versions 4.0 through 4.0.1, update to version 4.0.2 or later. For ISC DHCP server versions 4.1 through 4.1.1, update to version 4.1.2 or later. For ISC DHCP server versions 4.2 through 4.2.0, update to version 4.2.0-P1 or later.

Fix

Related Identifiers

CVE-2010-3611

OPENSUSE-SU-2024:10358-1

RHSA-2010:0923

RHSA-2010_0923

Affected Products

Isc Dhcp Server

Red Hat

References · 41

• http://mandriva.com/security/advisories?name=MDVSA-2010:226 · Vendor Advisory
• http://vupen.com/english/advisories/2010/2879 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050766.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051287.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-3611 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3611 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10358-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-3611 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-3611 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0923.html · Vendor Advisory
• http://secunia.com/advisories/42082 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2010-0923.html · Vendor Advisory
• http://isc.org/software/dhcp/advisories/cve-2010-3611 · Vendor Advisory
• https://suse.com/security/cve/CVE-2010-3611 · Note