NetSight
medium5.0

CVE-2011-4539

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers t…

Impact

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Affected products

VendorProductAffected versions
IscDhcp
Versions 4.0, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.1.1
CanonicalUbuntu Linux
Versions 11.04, 11.10
DebianDebian Linux
Versions 6.0, 7.0

Weakness classification

References