CVE-2010-3616

2010-12-1719:00:20

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.116 Low

EPSS

Percentile

95.3%

JSON

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.

OSVersionArchitecturePackageVersionFilename
Debian12allisc-dhcp< 4.4.3-P1-2isc-dhcp_4.4.3-P1-2_all.deb
Debian11allisc-dhcp< 4.4.1-2.3+deb11u2isc-dhcp_4.4.1-2.3+deb11u2_all.deb
Debian999allisc-dhcp< 4.4.3-P1-5isc-dhcp_4.4.3-P1-5_all.deb
Debian13allisc-dhcp< 4.4.3-P1-5isc-dhcp_4.4.3-P1-5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	isc-dhcp	< 4.4.3-P1-2	isc-dhcp_4.4.3-P1-2_all.deb
Debian	11	all	isc-dhcp	< 4.4.1-2.3+deb11u2	isc-dhcp_4.4.1-2.3+deb11u2_all.deb
Debian	999	all	isc-dhcp	< 4.4.3-P1-5	isc-dhcp_4.4.3-P1-5_all.deb
Debian	13	all	isc-dhcp	< 4.4.3-P1-5	isc-dhcp_4.4.3-P1-5_all.deb