CVE-2011-4539

Scores

EPSS

0.323low32.3%
0%20%40%60%80%100%

Percentile: 32.3%

CVSS

4.3medium2.0
0246810

CVSS Score: 4.3/10

All CVSS Scores

CVSS 2.0
4.3

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhatubuntu

CWEs

CWE-20

Related Vulnerabilities

Vulnerable Software (8)

Type: Configuration

Product: dhcp

Operating System: rhel 6

Trait:
{  "fixed": "4.1.1-25.P1.el6_2.1"}

Source: redhat

Type: Configuration

Product: dhcp3

Operating System: ubuntu hardy 8.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: dhcp3

Operating System: debian

Trait:
{  "unaffected": true}

Source: debian

Type: Configuration

Product: isc-dhcp

Operating System: debian

Trait:
{  "fixed": "4.2.2.dfsg.1-5"}

Source: debian

Type: Configuration

Vendor: canonical

Product: ubuntu_linux

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*...

Source: nvd

Type: Configuration

Vendor: debian

Product: debian_linux

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",...

Source: nvd

Type: Configuration

Vendor: isc

Product: dhcp

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:isc:dhcp:4.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:isc:dhcp:4.0.0:*:*:*:*:*:*:*",      "vulnerable":...

Source: nvd

Type: Configuration

Vendor: isc

Product: dhcp

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",      "vulne...

Source: nvd