Signature Detail
Short Name |
DHCP:SERVER:ISC-MAL-CLID |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
DHCP |
Keywords |
ISC DHCP Server Malformed Client Identifier Denial of Service |
Release Date |
2012/08/07 |
Update Number |
2171 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DHCP: ISC DHCP Server Malformed Client Identifier Denial of Service
This signature detects a known vulnerability in ISC DHCP server implementation. A successful attack can result in a denial-of-service condition. Versions 4.1.2 through 4.2.4 are affected by this vulnerability. Other versions might also be affected.
Extended Description
ISC DHCP is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to cause the affected application to crash, resulting in a denial-of-service condition.
Affected Products
- Debian Linux 6.0 amd64
- Debian Linux 6.0 arm
- Debian Linux 6.0 ia-32
- Debian Linux 6.0 ia-64
- Debian Linux 6.0 mips
- Debian Linux 6.0 powerpc
- Debian Linux 6.0 s/390
- Debian Linux 6.0 sparc
- ISC DHCP Server 4.1.2
- ISC DHCP Server 4.1-ESV-R1
- ISC DHCP Server 4.1-ESV-R3
- ISC DHCP Server 4.1-ESV-R4
- ISC DHCP Server 4.1-ESV-R5
- ISC DHCP Server 4.2
- ISC DHCP Server 4.2.0-P1
- ISC DHCP Server 4.2.2
- ISC DHCP Server 4.2.3
- ISC DHCP Server 4.2.4
- Mandriva Enterprise Server 5
- Mandriva Enterprise Server 5 X86 64
- Mandriva Linux Mandrake 2011
- Mandriva Linux Mandrake 2011 x86_64
- Oracle Enterprise Linux 5
- Oracle Enterprise Linux 6
- Oracle Enterprise Linux 6.2
- Red Hat Enterprise Linux 5 Server
- Red Hat Enterprise Linux Desktop 5 Client
- Red Hat Enterprise Linux Desktop 6
- Red Hat Enterprise Linux Desktop Optional 6
- Red Hat Enterprise Linux Desktop Workstation 5 Client
- Red Hat Enterprise Linux HPC Node 6
- Red Hat Enterprise Linux HPC Node Optional 6
- Red Hat Enterprise Linux Server 6
- Red Hat Enterprise Linux Server Optional 6
- Red Hat Enterprise Linux Workstation 6
- Red Hat Enterprise Linux Workstation Optional 6
- Red Hat Fedora 17
- Ubuntu Ubuntu Linux 11.04 amd64
- Ubuntu Ubuntu Linux 11.04 ARM
- Ubuntu Ubuntu Linux 11.04 i386
- Ubuntu Ubuntu Linux 11.04 powerpc
- Ubuntu Ubuntu Linux 11.10 amd64
- Ubuntu Ubuntu Linux 11.10 i386
- Ubuntu Ubuntu Linux 12.04 LTS amd64
- Ubuntu Ubuntu Linux 12.04 LTS i386
References
- BugTraq: 54665
- CVE: CVE-2012-3571
- CVE: CVE-2012-3570
- CVE: CVE-2012-3954
- URL: https://kb.isc.org/article/AA-00712