CVE-2011-4539
NoneCVSS
—
EPSS
15.2%
Published
Dec 8, 2011
CISA due date
—
The record
dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | isc-dhcp | 0 | 4.2.2.dfsg.1-5 |
| Debian:11 | isc-dhcp | 0 | 4.2.2.dfsg.1-5 |
| Debian:12 | isc-dhcp | 0 | 4.2.2.dfsg.1-5 |
| Debian:13 | isc-dhcp | 0 | 4.2.2.dfsg.1-5 |
| Debian:6.0 | isc-dhcp | 0 | 4.1.1-P1-15+squeeze5 |
| Debian:6.0 | isc-dhcp | 0 | 4.1.1-P1-15+squeeze6 |
| Red Hat:enterprise_linux:6::client | dhclient | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::client | dhcp | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::client | dhcp-common | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::client | dhcp-debuginfo | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::client | dhcp-devel | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | dhclient | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | dhcp | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | dhcp-common | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | dhcp-debuginfo | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | dhcp-devel | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::server | dhclient | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::server | dhcp | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::server | dhcp-common | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::server | dhcp-debuginfo | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::server | dhcp-devel | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | dhclient | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | dhcp | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | dhcp-common | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | dhcp-debuginfo | 0 | 12:4.1.1-25.P1.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | dhcp-devel | 0 | 12:4.1.1-25.P1.el6_2.1 |
| openSUSE:Tumbleweed | dhcp | 0 | 4.3.3.P1-3.1 |
Related vulnerabilities
- CVE-2016-2774 ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the… Also affects isc-dhcp
- CVE-2015-8605 ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote… Also affects isc-dhcp
- CVE-2012-3955 ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to… Also affects isc-dhcp
- CVE-2012-3571 ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to… Also affects isc-dhcp
- CVE-2011-2749 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… Also affects isc-dhcp
- CVE-2011-2748 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… Also affects isc-dhcp
- CVE-2011-0997 dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and… Also affects isc-dhcp
- CVE-2011-0413 The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before… Also affects isc-dhcp