ISC DHCP Multiple Denial of Service Vulnerabilities

Bugtraq ID:	54665
Class:	Unknown
CVE:	CVE-2012-3571 CVE-2012-3570 CVE-2012-3954
Remote:	Yes
Local:	No
Published:	Jul 25 2012 12:00AM
Updated:	Oct 26 2016 04:08AM
Credit:	Markus Hietava and the vendor.
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Slackware Linux x86_64 -current Slackware Linux 13.37 x86_64 Slackware Linux 13.37 Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux -current Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle VM Server for x86 3.4 Oracle VM Server for x86 3.3 Oracle VM Server for x86 3.2 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Juniper CTPView 7.3 Juniper CTPView 7.1R2 Juniper CTPView 7.1r1 ISC DHCP Server 4.2.3 ISC DHCP Server 4.2.2 ISC DHCP Server 4.1.2 ISC DHCP Server 4.2.4 ISC DHCP Server 4.2.0-P1 ISC DHCP Server 4.2 ISC DHCP Server 4.1-ESV-R5 ISC DHCP Server 4.1-ESV-R4 ISC DHCP Server 4.1-ESV-R3 ISC DHCP Server 4.1-ESV-R1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Avaya IP Office Server Edition 8.1 Avaya IP Office Application Server 8.1 Avaya Aura Experience Portal 6.0.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Experience Portal 6.0 SP1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Experience Portal 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700
Not Vulnerable:	Juniper CTPView 7.3R1 Juniper CTPView 7.1R3 ISC DHCP Server 4.2.4-P1 ISC DHCP Server 4.1-ESV-R6 Avaya IP Office Server Edition 9.0 Avaya Aura Experience Portal 6.0 SP2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700

ISC DHCP Multiple Denial of Service Vulnerabilities

ISC DHCP is prone to multiple denial-of-service vulnerabilities.

An attacker can exploit these issues to cause the affected application to crash, resulting in a denial-of-service condition.

ISC DHCP Multiple Denial of Service Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/54665.py

ISC DHCP Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Slackware Linux -current

• Slackware dhcp-4.2.4_P1-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/dh cp-4.2.4_P1-i486-1.txz

Slackware Linux 12.2

• Slackware dhcp-4.1_ESV_R6-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ dhcp-4.1_ESV_R6-i486-1_slack12.2.tgz

Slackware Linux 13.1 x86_64

• Slackware dhcp-4.1_ESV_R6-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/dhcp-4.1_ESV_R6-x86_64-1_slack13.1.txz

Slackware Linux 13.1

• Slackware dhcp-4.1_ESV_R6-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ dhcp-4.1_ESV_R6-i486-1_slack13.1.txz

Slackware Linux 12.1

• Slackware dhcp-4.1_ESV_R6-i486-1_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ dhcp-4.1_ESV_R6-i486-1_slack12.1.tgz

Slackware Linux x86_64 -current

• Slackware dhcp-4.2.4_P1-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ n/dhcp-4.2.4_P1-x86_64-1.txz

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva dhcp-client-4.1.2-0.7mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-common-4.1.2-0.7mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-devel-4.1.2-0.7mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-doc-4.1.2-0.7mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-relay-4.1.2-0.7mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-server-4.1.2-0.7mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

MandrakeSoft Enterprise Server 5

• Mandriva dhcp-client-4.1.2-0.7mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-common-4.1.2-0.7mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-devel-4.1.2-0.7mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-doc-4.1.2-0.7mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-relay-4.1.2-0.7mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-server-4.1.2-0.7mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 13.0 x86_64

• Slackware dhcp-4.1_ESV_R6-x86_64-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/dhcp-4.1_ESV_R6-x86_64-1_slack13.0.txz

Slackware Linux 13.37 x86_64

• Slackware dhcp-4.2.4_P1-x86_64-1_slack13.37.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packag es/dhcp-4.2.4_P1-x86_64-1_slack13.37.txz

Slackware Linux 13.0

• Slackware dhcp-4.1_ESV_R6-i486-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ dhcp-4.1_ESV_R6-i486-1_slack13.0.txz

Mandriva Linux Mandrake 2011 x86_64

• Mandriva dhcp-client-4.2.4-0.P1.1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-common-4.2.4-0.P1.1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-devel-4.2.4-0.P1.1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-doc-4.2.4-0.P1.1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-relay-4.2.4-0.P1.1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-server-4.2.4-0.P1.1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011

• Mandriva dhcp-client-4.2.4-0.P1.1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-common-4.2.4-0.P1.1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-devel-4.2.4-0.P1.1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-doc-4.2.4-0.P1.1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-relay-4.2.4-0.P1.1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva dhcp-server-4.2.4-0.P1.1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 13.37

• Slackware dhcp-4.2.4_P1-i486-1_slack13.37.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages /dhcp-4.2.4_P1-i486-1_slack13.37.txz

ISC DHCP Multiple Denial of Service Vulnerabilities

References:

• An Error in the Handling of an Unexpected Client Identifiers can Cause Server Cr (ISC)
  
• An Error in the Handling of Malformed Client Identifiers can Cause a Denial-of-S (ISC)
  
• ISC Homepage (ISC)
  
• Memory Leaks Found in ISC DHCP (ISC)
  
• 2016-10 Security Bulletin: CTPView: Multiple vulnerabilities in CTPView (Juniper)
  
• ASA-2012-373:dhcp security update (RHSA-2012-1141) (Avaya)
  
• CERT-FI Advisory on ISC DHCP (CERT)
  
• Oracle VM Server for x86 Bulletin - July 2016 (Oracle)