CVE-2010-3611

dhcp: NULL pointer dereference crash via crafted DHCPv6 packet

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.

ISC DHCP server v4.0 anterior a v4.0.2, v4.1 anterior a v4.1.2, y v4.2 anterior a v4.2-P1 permite a atacantes remotos causar una denegación de servicio (caída) a través de un paquete DHCPv6 contiendo un mensaje Relay-Forward sin una dirección en el campo de dirección de enlace Relay-Forward

*Credits: N/A

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

Attack Vector

Adjacent

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-09-27 CVE Reserved
2010-11-04 CVE Published
2023-03-07 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-476: NULL Pointer Dereference

CAPEC

References (18)

URL	Tag	Source
http://osvdb.org/68999	Vdb Entry
http://secunia.com/advisories/42345	Third Party Advisory
http://secunia.com/advisories/42407	Third Party Advisory
http://www.kb.cert.org/vuls/id/102047	Third Party Advisory
http://www.securityfocus.com/bid/44615	Vdb Entry
http://www.vupen.com/english/advisories/2010/3044	Vdb Entry
http://www.vupen.com/english/advisories/2010/3092	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/62965	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://www.vupen.com/english/advisories/2010/2879	2017-08-17

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050766.html	2017-08-17
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051287.html	2017-08-17
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html	2017-08-17
http://secunia.com/advisories/42082	2017-08-17
http://www.isc.org/software/dhcp/advisories/cve-2010-3611	2017-08-17
http://www.mandriva.com/security/advisories?name=MDVSA-2010:226	2017-08-17
http://www.redhat.com/support/errata/RHSA-2010-0923.html	2017-08-17
https://bugzilla.redhat.com/show_bug.cgi?id=649877	2010-11-30
https://access.redhat.com/security/cve/CVE-2010-3611	2010-11-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.0 Search vendor "Isc" for product "Dhcp" and version "4.0"		-		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.0.0 Search vendor "Isc" for product "Dhcp" and version "4.0.0"		-		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.0.1 Search vendor "Isc" for product "Dhcp" and version "4.0.1"		-		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.0.1 Search vendor "Isc" for product "Dhcp" and version "4.0.1"		b1		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.0.1 Search vendor "Isc" for product "Dhcp" and version "4.0.1"		rc1		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.1.0 Search vendor "Isc" for product "Dhcp" and version "4.1.0"		-		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.1.1 Search vendor "Isc" for product "Dhcp" and version "4.1.1"		-		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.1.1 Search vendor "Isc" for product "Dhcp" and version "4.1.1"		b1		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.1.1 Search vendor "Isc" for product "Dhcp" and version "4.1.1"		b2		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.1.1 Search vendor "Isc" for product "Dhcp" and version "4.1.1"		b3		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.1.1 Search vendor "Isc" for product "Dhcp" and version "4.1.1"		rc1		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.2.0 Search vendor "Isc" for product "Dhcp" and version "4.2.0"		-		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.2.0 Search vendor "Isc" for product "Dhcp" and version "4.2.0"		a1		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.2.0 Search vendor "Isc" for product "Dhcp" and version "4.2.0"		a2		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.2.0 Search vendor "Isc" for product "Dhcp" and version "4.2.0"		b1		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.2.0 Search vendor "Isc" for product "Dhcp" and version "4.2.0"		b2		Affected
Isc Search vendor "Isc"		Dhcp Search vendor "Isc" for product "Dhcp"				4.2.0 Search vendor "Isc" for product "Dhcp" and version "4.2.0"		rc1		Affected