ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

A vulnerability has been found and corrected in dhcp :

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID (CVE-2010-2156).

The updated packages have been patched to correct this issue.

This is a patch release of ISC DHCP 4.1.1, which contains a pair of bug fixes including one for a security related bug.
http://ftp.isc.org/isc/dhcp/dhcp-4.1.1-P1-RELNOTES

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2010-2156

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
48187	Mandriva Linux Security Advisory : dhcp (MDVSA-2010:114)	Nessus	Mandriva Local Security Checks	medium
47536	Fedora 12 : dhcp-4.1.1-17.P1.fc12 (2010-9479)	Nessus	Fedora Local Security Checks	medium
47535	Fedora 13 : dhcp-4.1.1-22.P1.fc13 (2010-9433)	Nessus	Fedora Local Security Checks	medium
47209	Fedora 11 : dhcp-4.1.0p1-6.fc11 (2010-10083)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2010-2156

high

Tenable Plugins

medium

medium

medium

medium