CVE-2010-3611: Null Pointer Dereference
First published: Tue Nov 02 2010(Updated: )
Common Vulnerabilities and Exposures assigned an identifier <a href="https://access.redhat.com/security/cve/CVE-2010-3611">CVE-2010-3611</a> to the following vulnerability: Name: <a href="https://access.redhat.com/security/cve/CVE-2010-3611">CVE-2010-3611</a> URL: <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3611">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3611</a> Assigned: 20100927 Reference: CONFIRM: <a href="http://www.isc.org/software/dhcp/advisories/cve-2010-3611">http://www.isc.org/software/dhcp/advisories/cve-2010-3611</a> Reference: CERT-VN:VU#102047 Reference: URL: <a href="http://www.kb.cert.org/vuls/id/102047">http://www.kb.cert.org/vuls/id/102047</a> Reference: BID:44615 Reference: URL: <a href="http://www.securityfocus.com/bid/44615">http://www.securityfocus.com/bid/44615</a> Reference: SECUNIA:42082 Reference: URL: <a href="http://secunia.com/advisories/42082">http://secunia.com/advisories/42082</a> Reference: VUPEN:ADV-2010-2879 Reference: URL: <a href="http://www.vupen.com/english/advisories/2010/2879">http://www.vupen.com/english/advisories/2010/2879</a> Reference: XF:iscdhcp-relayforward-dos(62965) Reference: URL: <a href="http://xforce.iss.net/xforce/xfdb/62965">http://xforce.iss.net/xforce/xfdb/62965</a> ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/dhcp | <12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
| ISC DHCP Server | =4.0 | |
| ISC DHCP Server | =4.0.0 | |
| ISC DHCP Server | =4.0.1 | |
| ISC DHCP Server | =4.0.1-b1 | |
| ISC DHCP Server | =4.0.1-rc1 | |
| ISC DHCP Server | =4.1.0 | |
| ISC DHCP Server | =4.1.1 | |
| ISC DHCP Server | =4.1.1-b1 | |
| ISC DHCP Server | =4.1.1-b2 | |
| ISC DHCP Server | =4.1.1-b3 | |
| ISC DHCP Server | =4.1.1-rc1 | |
| ISC DHCP Server | =4.2.0 | |
| ISC DHCP Server | =4.2.0-a1 | |
| ISC DHCP Server | =4.2.0-a2 | |
| ISC DHCP Server | =4.2.0-b1 | |
| ISC DHCP Server | =4.2.0-b2 | |
| ISC DHCP Server | =4.2.0-rc1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2010-3611 https://nvd.nist.gov/vuln/detail/CVE-2010-3611
- https://bugzilla.redhat.com/show_bug.cgi?id=649877
- https://access.redhat.com/errata/RHSA-2010:0923
- https://access.redhat.com/security/cve/CVE-2010-3611
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3611
- http://www.isc.org/software/dhcp/advisories/cve-2010-3611
- http://www.kb.cert.org/vuls/id/102047
- http://www.securityfocus.com/bid/44615
- http://secunia.com/advisories/42082
- http://www.vupen.com/english/advisories/2010/2879
- http://xforce.iss.net/xforce/xfdb/62965
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=649880
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=458016&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=458016&action=edit
- https://rhn.redhat.com/errata/RHSA-2010-0923.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050766.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051287.html
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
- http://osvdb.org/68999
- http://secunia.com/advisories/42345
- http://secunia.com/advisories/42407
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:226
- http://www.redhat.com/support/errata/RHSA-2010-0923.html
- http://www.vupen.com/english/advisories/2010/3044
- http://www.vupen.com/english/advisories/2010/3092
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62965
- collector/redhat-cve
- collector/redhat-bugzilla
- alias/CVE-2010-3611
- agent/weakness
- agent/type
- agent/event
- agent/author
- agent/severity
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/references
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- package-manager/redhat
- vendor/isc
- canonical/isc dhcp server
- version/isc dhcp server/4.0
- version/isc dhcp server/4.0.0
- version/isc dhcp server/4.0.1
- version/isc dhcp server/4.0.1-b1
- version/isc dhcp server/4.0.1-rc1
- version/isc dhcp server/4.1.0
- version/isc dhcp server/4.1.1
- version/isc dhcp server/4.1.1-b1
- version/isc dhcp server/4.1.1-b2
- version/isc dhcp server/4.1.1-b3
- version/isc dhcp server/4.1.1-rc1
- version/isc dhcp server/4.2.0
- version/isc dhcp server/4.2.0-a1
- version/isc dhcp server/4.2.0-a2
- version/isc dhcp server/4.2.0-b1
- version/isc dhcp server/4.2.0-b2
- version/isc dhcp server/4.2.0-rc1