CVE-2010-2156

Description

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Affected products

• ISC / dhcp4.1.0 – 4.1.0
• ISC / dhcp4.1.1 – 4.1.1
• ISC / dhcp4.1.1 – 4.1.1
• ISC / dhcp4.1.1 – 4.1.1
• ISC / dhcp4.1.1 – 4.1.1
• ISC / dhcp4.1.1 – 4.1.1
• ISC / dhcp4.0.0 – 4.0.0
• ISC / dhcp4.0.1 – 4.0.1
• ISC / dhcp4.0.1 – 4.0.1
• ISC / dhcp4.0.1 – 4.0.1
• ISC / dhcp4.0.2 – 4.0.2
• ISC / dhcp4.0.2 – 4.0.2
• ISC / dhcp4.0.2 – 4.0.2
• ISC / dhcp4.0.2 – 4.0.2
• ISC / dhcp4.0.2 – 4.0.2

References

• VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:114
• VENDOR_ADVISORYhttp://secunia.com/advisories/40116
• MISChttp://ftp.isc.org/isc/dhcp/dhcp-4.1.1-P1-RELNOTES
• MAILING_LISThttp://lists.fedoraproject.org/pipermail/package-announce/2010-June/042843.html
• MISChttp://www.securityfocus.com/bid/40775
• EXPLOIThttp://www.exploit-db.com/exploits/14185
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/59222
• MISChttp://ftp.isc.org/isc/dhcp/dhcp-4.0.2-P1-RELNOTES
• MISChttp://www.securitytracker.com/id?1024093