PT-2012-1167 · Isc+1 · Dhcp+2

Published 2012-01-15 · Updated 2024-06-15 · CVE-2011-4868

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions dhcp versions prior to 4.2.4 p2 ISC DHCP versions prior to 4.2.3-P2

Description The issue concerns the dhcp package in Gentoo Linux and ISC DHCP, where multiple vulnerabilities can be exploited to disrupt the availability of protected information. The logging functionality in dhcpd, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure. This allows remote attackers to cause a denial of service via crafted packets related to a lease-status update, resulting in a NULL pointer dereference and daemon crash.

Recommendations For dhcp versions prior to 4.2.4 p2, update to version 4.2.4 p2 or later to resolve the issue. For ISC DHCP versions prior to 4.2.3-P2, update to version 4.2.3-P2 or later to resolve the issue. As a temporary workaround, consider disabling the Dynamic DNS (DDNS) functionality until a patch is available. Restrict access to the dhcpd service to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-399

CWE-20

Related Identifiers

BDU:2015-09699

CVE-2011-4868

OPENSUSE-SU-2024:10358-1

Affected Products

Gentoo Linux

Isc Dhcp

Dhcp

References · 26

• https://osv.dev/vulnerability/CVE-2011-4868 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10358-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-4868 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-4868 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09699 · Security Note
• https://isc.org/software/dhcp/advisories/cve-2011-4868 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201301-06.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4868 · Vendor Advisory
• https://suse.com/security/cve/CVE-2010-3611 · Note
• https://deepthought.isc.org/article/AA-00595 · Note
• https://suse.com/security/cve/CVE-2012-3955 · Note
• https://suse.com/security/cve/CVE-2012-3571 · Note
• https://suse.com/security/cve/CVE-2011-4868 · Note
• https://suse.com/security/cve/CVE-2015-8605 · Note
• https://suse.com/security/cve/CVE-2010-3616 · Note