CVE-2012-3955: High severity isc dhcp vulnerability
Published Sep 14, 2012
·Updated
ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
Affected Software
31 affected components
ISC DHCP=4.1-esv
ISC DHCP=4.1-esv-r1
ISC DHCP=4.1-esv-r2
ISC DHCP=4.1-esv-r3
ISC DHCP=4.1-esv-r3_b1
ISC DHCP=4.1-esv-r4
ISC DHCP=4.1-esv-r5
ISC DHCP=4.1-esv-r5_b1
ISC DHCP=4.1-esv-r5_rc1
ISC DHCP=4.1-esv-r5_rc2
ISC DHCP=4.1-esv-r6
ISC DHCP=4.1-esv-rc1
ISC DHCP=4.1.0
ISC DHCP=4.1.0-a1
ISC DHCP=4.1.0-a2
ISC DHCP=4.1.0-b1
ISC DHCP=4.1.1
ISC DHCP=4.1.1-b1
ISC DHCP=4.1.1-b2
ISC DHCP=4.1.1-b3
ISC DHCP=4.1.1-rc1
ISC DHCP=4.1.2
ISC DHCP=4.1.2-b1
ISC DHCP=4.1.2-p1
ISC DHCP=4.1.2-rc1
Debian Debian Linux=6.0
Debian Debian Linux=7.0
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=11.04
Canonical Ubuntu Linux=11.10
Canonical Ubuntu Linux=12.04
Event History
Sep 14, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3955?
CVE-2012-3955 is classified as a denial of service vulnerability that can cause the ISC DHCP server to crash.
2
How do I fix CVE-2012-3955?
To resolve CVE-2012-3955, update to ISC DHCP version 4.1-ESV-R7 or 4.2.4-P2 or later.
3
What software is affected by CVE-2012-3955?
CVE-2012-3955 affects ISC DHCP versions 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2.
4
Can CVE-2012-3955 be exploited remotely?
Yes, CVE-2012-3955 allows remote attackers to exploit the vulnerability under certain circumstances.
5
What type of attack does CVE-2012-3955 facilitate?
CVE-2012-3955 facilitates a denial of service attack leading to a crash of the DHCP server.