CVE-2006-3122: Medium severity ISC dhcpd vulnerability
The supersedelease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with "corrupt lease uid."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3122?
CVE-2006-3122 has a high severity rating as it allows remote attackers to cause a denial of service by crashing the ISC DHCP server.
How do I fix CVE-2006-3122?
To fix CVE-2006-3122, upgrade ISC DHCP server to a version later than 2.0pl5.
Which versions of ISC DHCP are affected by CVE-2006-3122?
ISC DHCP server versions up to and including 2.0pl5 are affected by CVE-2006-3122.
What type of attack does CVE-2006-3122 facilitate?
CVE-2006-3122 facilitates a denial of service attack by exploiting malformed DHCPDISCOVER packets.
Is there a workaround for CVE-2006-3122 if I cannot upgrade immediately?
A potential workaround for CVE-2006-3122 is to implement packet filtering to reject suspicious DHCP packets.