Skip to main content

ISC DHCP Multiple Vulnerabilities

Last Update Date: 26 Jul 2012 12:03 Release Date: 26 Jul 2012 4968 Views

RISK: Medium Risk

TYPE: Servers - Network Management

TYPE: Network Management

Multiple vulnerabilities have been identified in ISC DHCP, which can be exploited by remoter user to cause denial of service.

  1. A remote user on the local network can send a specially crafted client identifier parameter value to trigger a buffer overflow and cause the target service to crash.
  2. A remote user on the local network can send a specially crafted client identifier parameter value to cause the service to enter an infinite loop, preventing the processing of subsequent client requests and consuming excessive CPU resources on the target system.
  3. A remote user can send specially crafted data to trigger a small memory leak. On systems that are run for a long period without re-starting or on systems handling heavy traffic, this may consume excessive memory resources on the target system.

Impact

  • Denial of Service

System / Technologies affected

  • Versions 4.1.x, 4.2.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued a fix (4.1-ESV-R6, 4.2.4-P1).

Vulnerability Identifier


Source


Related Link