| Package | Affected versions | Patched versions |
|---|---|---|
| dhcp | = 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.1.0= 4.0.0= 4.1.0= 4.2.0= 4.2.1= 4.2.2= 4.2.3≤ 4.2.3 |
The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free