CVE-2011-2749: Input Validation

Published Aug 15, 2011

Updated

The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.

Affected Software

92 affected components

ISC DHCP=4.0.2-b2

ISC DHCP=4.1-esv-r3_b1

ISC DHCP=3.0.4-b2

ISC DHCP=3.1.0-b1

ISC DHCP=3.1.0-a3

ISC DHCP=4.1-esv-r3

ISC DHCP=4.1.0

ISC DHCP=3.0.6-rc1

ISC DHCP=4.0.2-b3

ISC DHCP=4.1-esv-r2

ISC DHCP=3.1.2-rc1

ISC DHCP=4.1.1-rc1

ISC DHCP=4.2.0-b2

ISC DHCP=3.1.0-rc1

ISC DHCP=3.0.4-b1

ISC DHCP=4.0.2-b1

ISC DHCP=3.1.0-a1

ISC DHCP=3.0.1-rc12

ISC DHCP=3.0

ISC DHCP=3.0.2-b1

ISC DHCP=3.0.3-b1

ISC DHCP=4.2.0-a2

ISC DHCP=4.1.1-b2

ISC DHCP=3.0.1-rc1

ISC DHCP=3.0.4-b3

ISC DHCP=3.0.2-rc1

ISC DHCP=4.0.1-rc1

ISC DHCP=4.2.0-b1

ISC DHCP=4.2.1-rc1

ISC DHCP=3.0.1-rc7

ISC DHCP=3.1-esv

ISC DHCP=3.0.2-rc3

ISC DHCP=4.2.0-a1

ISC DHCP=3.0.1-rc2

ISC DHCP=4.0.1-b1

ISC DHCP=3.1.3-b1

ISC DHCP=3.0.1-rc14

ISC DHCP=4.0.2-rc1

ISC DHCP=3.0.1-rc6

ISC DHCP=3.0.2-rc2

ISC DHCP=3.0.1-rc13

ISC DHCP=4.0.3-rc1

ISC DHCP=3.0.1-rc9

ISC DHCP=3.0.3-b3

ISC DHCP=3.1.1-rc1

ISC DHCP=3.1.0-a2

ISC DHCP=3.0.1-rc8

ISC DHCP=4.0.0

ISC DHCP=3.0.3-b2

ISC DHCP=4.1.1-b3

ISC DHCP=3.1

ISC DHCP=4.0.3-b1

ISC DHCP=4.1-esv-r1

ISC DHCP=4.1.1-b1

ISC DHCP=4.1-esv-rc1

ISC DHCP=3.1.2-b1

ISC DHCP=4.2.1-b1

ISC DHCP=4.2.0-rc1

ISC DHCP=3.1.3-rc1

ISC DHCP=4.0

ISC DHCP=3.0.1-rc10

ISC DHCP=4.0-esv

ISC DHCP=4.2.0-p1

ISC DHCP=3.0.5-rc1

ISC DHCP=3.0.1-rc11

ISC DHCP=3.1.1-rc2

ISC DHCP=3.0.4-rc1

ISC DHCP=3.1.0-b2

ISC DHCP=3.0.1-rc5

ISC DHCP=4.1.2

ISC DHCP=3.0.1

ISC DHCP=3.0.2

ISC DHCP=3.0.4

ISC DHCP=3.0.5

ISC DHCP=3.1.0

ISC DHCP=3.1.1

ISC DHCP=3.1.2

ISC DHCP=3.1.3

ISC DHCP=4.0.1

ISC DHCP=4.0.2

ISC DHCP=4.0.3

ISC DHCP=4.1-esv

ISC DHCP=4.1.1

ISC DHCP=4.2.0

ISC DHCP=4.2.1

Debian Debian Linux=5.0

Debian Debian Linux=7.0

Debian Debian Linux=6.0

Canonical Ubuntu Linux=10.10

Canonical Ubuntu Linux=11.04

Canonical Ubuntu Linux=8.04

Canonical Ubuntu Linux=10.04

Remediation

Patch Available

https://bugzilla.redhat.com/show_bug.cgi?id=729382

Event History

Aug 15, 2011

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2749?

CVE-2011-2749 is categorized as a denial-of-service vulnerability that can cause the DHCP daemon to exit.

How do I fix CVE-2011-2749?

To fix CVE-2011-2749, upgrade to ISC DHCP version 4.2.2 or later, or apply patches provided by your OS vendor.

What systems are affected by CVE-2011-2749?

CVE-2011-2749 affects ISC DHCP versions 3.x and 4.x prior to 4.2.2 including several specific versions mentioned in the advisory.

Can CVE-2011-2749 be exploited remotely?

Yes, CVE-2011-2749 can be exploited remotely through a crafted BOOTP packet sent to the affected DHCP server.

What types of attacks can result from CVE-2011-2749?

Exploitation of CVE-2011-2749 can lead to service disruption by causing the DHCP daemon to crash, resulting in a denial of service.