CVE-2010-3616

MEDIUM 5.0CVE-2010-3616 · Published 17/12/2010 · updated 16/06/2026

In short

CVE-2010-3616 is a MEDIUM (CVSS 5.0) vulnerability affecting dhcp (isc).
Chance of exploitation in the next 30 days (EPSS): 7.9%, higher than 94.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dhcp isc	`= 4.2.0`	No fix yet

Description

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.

References

lists.fedoraproject.org/pipermail/package-announce/2010-December/052329.html
secunia.com/advisories/42618 · Vendor Advisory
secunia.com/advisories/42682
kb.cert.org/vuls/id/159528 · US Government Resource
mandriva.com/security/advisories
securityfocus.com/bid/45360
securitytracker.com/id
vupen.com/english/advisories/2010/3208 · Vendor Advisory
vupen.com/english/advisories/2011/0052
lists.isc.org/pipermail/dhcp-users/2010-December/012368.html
isc.org/software/dhcp/advisories/cve-2010-3616 · Vendor Advisory

More vulnerabilities in dhcp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

dhcp

isc

= 4.2.0

No fix yet

Description

More vulnerabilities in dhcp

See all →