CVE-2011-0997
NoneCVSS
—
EPSS
84.6%
Published
Apr 8, 2011
CISA due date
—
The record
dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | isc-dhcp | 0 | 4.1.1-P1-16.1 |
| Debian:12 | isc-dhcp | 0 | 4.1.1-P1-16.1 |
| Debian:13 | isc-dhcp | 0 | 4.1.1-P1-16.1 |
| Debian:14 | isc-dhcp | 0 | 4.1.1-P1-16.1 |
| Debian:5.0 | dhcp3 | 0 | 3.1.1-6+lenny5 |
| Debian:6.0 | isc-dhcp | 0 | 4.1.1-P1-15+squeeze2 |
| Red Hat:enterprise_linux:4::as | dhclient | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::as | dhcp | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::as | dhcp-debuginfo | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::as | dhcp-devel | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::desktop | dhclient | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::desktop | dhcp | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::desktop | dhcp-debuginfo | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::desktop | dhcp-devel | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::es | dhclient | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::es | dhcp | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::es | dhcp-debuginfo | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::es | dhcp-devel | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::ws | dhclient | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::ws | dhcp | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::ws | dhcp-debuginfo | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:4::ws | dhcp-devel | 0 | 7:3.0.1-67.el4 |
| Red Hat:enterprise_linux:5::server | dhclient | 0 | 12:3.0.5-23.el5_6.4 |
| Red Hat:enterprise_linux:5::server | dhcp | 0 | 12:3.0.5-23.el5_6.4 |
| Red Hat:enterprise_linux:5::server | dhcp-debuginfo | 0 | 12:3.0.5-23.el5_6.4 |
| Red Hat:enterprise_linux:5::server | dhcp-devel | 0 | 12:3.0.5-23.el5_6.4 |
| Red Hat:enterprise_linux:5::server | libdhcp4client | 0 | 12:3.0.5-23.el5_6.4 |
| Red Hat:enterprise_linux:5::server | libdhcp4client-devel | 0 | 12:3.0.5-23.el5_6.4 |
| Red Hat:enterprise_linux:6::client | dhclient | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::client | dhcp | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::client | dhcp-debuginfo | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::client | dhcp-devel | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::computenode | dhclient | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::computenode | dhcp | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::computenode | dhcp-debuginfo | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::computenode | dhcp-devel | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::server | dhclient | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::server | dhcp | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::server | dhcp-debuginfo | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::server | dhcp-devel | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::workstation | dhclient | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::workstation | dhcp | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::workstation | dhcp-debuginfo | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:enterprise_linux:6::workstation | dhcp-devel | 0 | 12:4.1.1-12.P1.el6_0.4 |
| Red Hat:rhel_els:3::as | dhclient | 0 | 7:3.0.1-10.3_EL3 |
| Red Hat:rhel_els:3::as | dhcp | 0 | 7:3.0.1-10.3_EL3 |
| Red Hat:rhel_els:3::as | dhcp-debuginfo | 0 | 7:3.0.1-10.3_EL3 |
| Red Hat:rhel_els:3::as | dhcp-devel | 0 | 7:3.0.1-10.3_EL3 |
| Red Hat:rhel_els:3::es | dhclient | 0 | 7:3.0.1-10.3_EL3 |
| Red Hat:rhel_els:3::es | dhcp | 0 | 7:3.0.1-10.3_EL3 |
| Red Hat:rhel_els:3::es | dhcp-debuginfo | 0 | 7:3.0.1-10.3_EL3 |
| Red Hat:rhel_els:3::es | dhcp-devel | 0 | 7:3.0.1-10.3_EL3 |
| openSUSE:Tumbleweed | dhcp | 0 | 4.3.3.P1-3.1 |
Related vulnerabilities
- CVE-2016-2774 ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the… Also affects isc-dhcp
- CVE-2015-8605 ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote… Also affects isc-dhcp
- CVE-2012-3955 ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to… Also affects isc-dhcp
- CVE-2012-3571 ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to… Also affects isc-dhcp
- CVE-2011-4539 dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly… Also affects isc-dhcp
- CVE-2011-2749 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… Also affects isc-dhcp
- CVE-2011-2748 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… Also affects isc-dhcp
- CVE-2011-0413 The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before… Also affects isc-dhcp