CVE-2012-3955

ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
iscdhcp
4.1-esv
iscdhcp
4.1-esv:r1
iscdhcp
4.1-esv:r2
iscdhcp
4.1-esv:r3
iscdhcp
4.1-esv:r3_b1
iscdhcp
4.1-esv:r4
iscdhcp
4.1-esv:r5
iscdhcp
4.1-esv:r5_b1
iscdhcp
4.1-esv:r5_rc1
iscdhcp
4.1-esv:r5_rc2
iscdhcp
4.1-esv:r6
iscdhcp
4.1-esv:rc1
iscdhcp
4.1.0
iscdhcp
4.1.0:a1
iscdhcp
4.1.0:a2
iscdhcp
4.1.0:b1
iscdhcp
4.1.1
iscdhcp
4.1.1:b1
iscdhcp
4.1.1:b2
iscdhcp
4.1.1:b3
iscdhcp
4.1.1:rc1
iscdhcp
4.1.2
iscdhcp
4.1.2:b1
iscdhcp
4.1.2:p1
iscdhcp
4.1.2:rc1
debiandebian_linux
6.0
debiandebian_linux
7.0
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
isc-dhcp
bookworm
4.4.3-P1-2
fixed
bullseye
4.4.1-2.3+deb11u2
fixed
bullseye (security)
4.4.1-2.3+deb11u1
fixed
sid
4.4.3-P1-5
fixed
trixie
4.4.3-P1-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dhcp3
hardy
not-affected
lucid
not-affected
natty
dne
oneiric
dne
precise
dne
isc-dhcp
hardy
dne
lucid
dne
natty
Fixed 4.1.1-P1-15ubuntu9.6
released
oneiric
Fixed 4.1.1-P1-17ubuntu10.5
released
precise
Fixed 4.1.ESV-R4-0ubuntu5.5
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
dhcp
suse enterprise desktop 15
4.3.5-4.15
fixed
suse enterprise desktop 15 SP1
4.3.5-4.15
fixed
suse enterprise sap 12 SP5
4.3.3-10.16.4
fixed
suse enterprise sap 15
4.3.5-4.15
fixed
suse enterprise sap 15 SP1
4.3.5-4.15
fixed
suse enterprise server 12 SP2
4.3.3-9.1
fixed
suse enterprise server 12 SP3
4.3.3-9.1
fixed
suse enterprise server 12 SP5
4.3.3-10.16.4
fixed
suse enterprise server 15
4.3.5-4.15
fixed
suse enterprise server 15 SP1
4.3.5-4.15
fixed
dhcp-client
suse enterprise desktop 15
4.3.5-4.15
fixed
suse enterprise desktop 15 SP1
4.3.5-4.15
fixed
suse enterprise sap 12 SP5
4.3.3-10.16.4
fixed
suse enterprise sap 15
4.3.5-4.15
fixed
suse enterprise sap 15 SP1
4.3.5-4.15
fixed
suse enterprise server 12 SP2
4.3.3-9.1
fixed
suse enterprise server 12 SP3
4.3.3-9.1
fixed
suse enterprise server 12 SP5
4.3.3-10.16.4
fixed
suse enterprise server 15
4.3.5-4.15
fixed
suse enterprise server 15 SP1
4.3.5-4.15
fixed
dhcp-devel
suse enterprise desktop 15
4.3.5-4.15
fixed
suse enterprise desktop 15 SP1
4.3.5-4.15
fixed
suse enterprise sap 15
4.3.5-4.15
fixed
suse enterprise sap 15 SP1
4.3.5-4.15
fixed
suse enterprise server 15
4.3.5-4.15
fixed
suse enterprise server 15 SP1
4.3.5-4.15
fixed
dhcp-relay
suse enterprise sap 12 SP5
4.3.3-10.16.4
fixed
suse enterprise sap 15
4.3.5-4.15
fixed
suse enterprise sap 15 SP1
4.3.5-4.15
fixed
suse enterprise server 12 SP2
4.3.3-9.1
fixed
suse enterprise server 12 SP3
4.3.3-9.1
fixed
suse enterprise server 12 SP5
4.3.3-10.16.4
fixed
suse enterprise server 15
4.3.5-4.15
fixed
suse enterprise server 15 SP1
4.3.5-4.15
fixed
dhcp-server
suse enterprise sap 12 SP5
4.3.3-10.16.4
fixed
suse enterprise sap 15
4.3.5-4.15
fixed
suse enterprise sap 15 SP1
4.3.5-4.15
fixed
suse enterprise server 12 SP2
4.3.3-9.1
fixed
suse enterprise server 12 SP3
4.3.3-9.1
fixed
suse enterprise server 12 SP5
4.3.3-10.16.4
fixed
suse enterprise server 15
4.3.5-4.15
fixed
suse enterprise server 15 SP1
4.3.5-4.15
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
dhclient
RHEL 6
12:4.1.1-34.P1.el6
fixed
dhcp
RHEL 6
12:4.1.1-34.P1.el6
fixed
dhcp-common
RHEL 6
12:4.1.1-34.P1.el6
fixed
dhcp-devel
RHEL 6
12:4.1.1-34.P1.el6
fixed
References