Vulnerability Details CVE-2012-3955
ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.2
EPSS Ranking 95.1%
CVSS Severity
CVSS v2 Score 7.1
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2013-0504.html
- http://secunia.com/advisories/51318
- http://security.gentoo.org/glsa/glsa-201301-06.xml
- http://www.debian.org/security/2012/dsa-2551
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:153
- http://www.securityfocus.com/bid/55530
- http://www.securitytracker.com/id?1027528
- http://www.ubuntu.com/usn/USN-1571-1
- https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of
- https://kb.isc.org/article/AA-00779
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2013-0504.html
- http://secunia.com/advisories/51318
- http://security.gentoo.org/glsa/glsa-201301-06.xml
- http://www.debian.org/security/2012/dsa-2551
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:153
- http://www.securityfocus.com/bid/55530
- http://www.securitytracker.com/id?1027528
- http://www.ubuntu.com/usn/USN-1571-1
- https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of
- https://kb.isc.org/article/AA-00779
Products affected by CVE-2012-3955
-
cpe:2.3:a:isc:dhcp:4.1-esv
-
cpe:2.3:a:isc:dhcp:4.1.0
-
cpe:2.3:a:isc:dhcp:4.1.1
-
cpe:2.3:a:isc:dhcp:4.1.2
-
cpe:2.3:o:canonical:ubuntu_linux:10.04
-
cpe:2.3:o:canonical:ubuntu_linux:11.04
-
cpe:2.3:o:canonical:ubuntu_linux:11.10
-
cpe:2.3:o:canonical:ubuntu_linux:12.04
-
cpe:2.3:o:debian:debian_linux:6.0
-
cpe:2.3:o:debian:debian_linux:7.0