CVE-2012-3955

ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.1 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
VendorProductVersion
iscdhcp
4.1-esv
iscdhcp
4.1-esv:r1
iscdhcp
4.1-esv:r2
iscdhcp
4.1-esv:r3
iscdhcp
4.1-esv:r3_b1
iscdhcp
4.1-esv:r4
iscdhcp
4.1-esv:r5
iscdhcp
4.1-esv:r5_b1
iscdhcp
4.1-esv:r5_rc1
iscdhcp
4.1-esv:r5_rc2
iscdhcp
4.1-esv:r6
iscdhcp
4.1-esv:rc1
iscdhcp
4.1.0
iscdhcp
4.1.0:a1
iscdhcp
4.1.0:a2
iscdhcp
4.1.0:b1
iscdhcp
4.1.1
iscdhcp
4.1.1:b1
iscdhcp
4.1.1:b2
iscdhcp
4.1.1:b3
iscdhcp
4.1.1:rc1
iscdhcp
4.1.2
iscdhcp
4.1.2:b1
iscdhcp
4.1.2:p1
iscdhcp
4.1.2:rc1
debiandebian_linux
6.0
debiandebian_linux
7.0
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
isc-dhcp
bullseye
4.4.1-2.3+deb11u2
fixed
bullseye (security)
4.4.1-2.3+deb11u1
fixed
bookworm
4.4.3-P1-2
fixed
sid
4.4.3-P1-5
fixed
trixie
4.4.3-P1-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dhcp3
precise
dne
oneiric
dne
natty
dne
lucid
not-affected
hardy
not-affected
isc-dhcp
precise
Fixed 4.1.ESV-R4-0ubuntu5.5
released
oneiric
Fixed 4.1.1-P1-17ubuntu10.5
released
natty
Fixed 4.1.1-P1-15ubuntu9.6
released
lucid
dne
hardy
dne
References