Improper input validation in Isc Dhcp

CVE-2011-0413

The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message o…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.086 (92.6th percentile) — read the EPSS interpretation.

Affected products

  • Isc Dhcp — versions 4.0, 4.0.0, 4.0.1
  • N/a — versions n/a

Weakness classification (CWE)

References

  • ADV-2011-0266 (Permissions Required, vdb-entry, x_refsource_VUPEN)
  • 43006 (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • ADV-2011-0235 (Permissions Required, vdb-entry, x_refsource_VUPEN)
  • 43354 (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • dhcp-dhcpv6-dos(64959) (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_XF)
  • 70680 (x_refsource_OSVDB, vdb-entry, Broken Link)
  • 43104 (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
  • MDVSA-2011:022 (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
  • ADV-2011-0583 (Permissions Required, vdb-entry, x_refsource_VUPEN)