ISC DHCP Server DHCPv6 Decline Message Denial of Service Vulnerability
BID:46035
Info
ISC DHCP Server DHCPv6 Decline Message Denial of Service Vulnerability
| Bugtraq ID: | 46035 |
| Class: | Access Validation Error |
| CVE: |
CVE-2011-0413 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2011 12:00AM |
| Updated: | Apr 13 2015 08:40PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
SuSE openSUSE 11.3 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 ISC DHCP Server 4.2.1 ISC DHCP Server 4.1.2 ISC DHCP Server 4.0.2 ISC DHCP Server 4.2.0-P2 ISC DHCP Server 4.2.0-P1 ISC DHCP Server 4.2 ISC DHCP Server 4.1 ISC DHCP Server 4.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 |
| Not Vulnerable: |
ISC DHCP Server 4.2.1b1 ISC DHCP Server 4.1.2-P1 ISC DHCP Server 4.1-ESV-R1 |
Discussion
ISC DHCP Server DHCPv6 Decline Message Denial of Service Vulnerability
The ISC DHCP Server is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause the affected application to crash, resulting in a denial-of-service condition.
ISC DHCP Server versions 4.0 through 4.2.1 are affected.
The ISC DHCP Server is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause the affected application to crash, resulting in a denial-of-service condition.
ISC DHCP Server versions 4.0 through 4.2.1 are affected.
Exploit / POC
ISC DHCP Server DHCPv6 Decline Message Denial of Service Vulnerability
An attacker can carry out this attack using readily available tools.
An attacker can carry out this attack using readily available tools.
Solution / Fix
ISC DHCP Server DHCPv6 Decline Message Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
Mandriva Linux Mandrake 2010.0
Mandriva Linux Mandrake 2010.0 x86_64
Mandriva Linux Mandrake 2010.1
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
-
Mandriva dhcp-client-4.1.2-0.3mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-common-4.1.2-0.3mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-devel-4.1.2-0.3mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-doc-4.1.2-0.3mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-relay-4.1.2-0.3mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-server-4.1.2-0.3mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2010.0
-
Mandriva dhcp-client-4.1.2-0.3mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-common-4.1.2-0.3mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-devel-4.1.2-0.3mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-doc-4.1.2-0.3mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-relay-4.1.2-0.3mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-server-4.1.2-0.3mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2010.0 x86_64
-
Mandriva dhcp-client-4.1.2-0.3mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-common-4.1.2-0.3mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-devel-4.1.2-0.3mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-doc-4.1.2-0.3mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-relay-4.1.2-0.3mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-server-4.1.2-0.3mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2010.1
-
Mandriva dhcp-client-4.1.2-0.3mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-common-4.1.2-0.3mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-devel-4.1.2-0.3mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-doc-4.1.2-0.3mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-relay-4.1.2-0.3mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva dhcp-server-4.1.2-0.3mdv2010.2.i586.rpm
http://www.mandriva.com/en/download/
References
ISC DHCP Server DHCPv6 Decline Message Denial of Service Vulnerability
References:
References: