PT-2012-1169 · Isc+3 · Isc Dhcp+3

Glen Eustace · Published 2012-09-14 · Updated 2024-06-15 · CVE-2012-3955

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC DHCP versions 4.1.x through 4.1-ESV-R6 ISC DHCP versions 4.2.x through 4.2.4-P1

Description The issue allows remote attackers to cause a denial of service, potentially disrupting the availability of protected information. This can be achieved by establishing an IPv6 lease in an environment where the lease expiration time is later reduced, leading to opportunistic circumstances that may cause the daemon to crash.

Recommendations For ISC DHCP versions 4.1.x through 4.1-ESV-R6, update to version 4.1-ESV-R7 or later. For ISC DHCP versions 4.2.x through 4.2.4-P1, update to version 4.2.4-P2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-09699

CESA-2013_0504

CVE-2012-3955

DSA-2551-1

OPENSUSE-SU-2024:10358-1

RHSA-2013:0504

RHSA-2013_0504

SUSE-SU-2012_1327-1

Affected Products

Centos

Isc Dhcp

Red Hat

Suse

References · 56

• https://security-tracker.debian.org/tracker/CVE-2012-3955 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2012:153 · Vendor Advisory
• https://kb.isc.org/article/AA-00779 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html · Vendor Advisory
• http://debian.org/security/2012/dsa-2551 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09699 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-3955 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201301-06.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3955 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0504.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-3955 · Vendor Advisory
• http://ubuntu.com/usn/USN-1571-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html · Vendor Advisory