Overview
The ISC DHCP server contains a vulnerability that could allow a remote attacker to cause a denial of service.
Description
According to ISC: If a TCP connection is established to the server on a port which has been configured for communication with a failover peer, this can cause it to become non-responsive to all normal DHCP protocol traffic. The server will progress to a communications-interrupted state - but in addition will also cease to provide DHCP services to clients. The server must be restarted to resume normal operation. |
Impact
An unauthenticated remote attacker could cause the server to become unresponsive to all normal DHCP protocol traffic, thereby creating a denial of service. |
Solution
Apply an update |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to Internet Systems Consortium for reporting this vulnerability.
This document was written by Michael Orlando.
Other Information
| CVE IDs: | CVE-2010-3616 |
| Severity Metric: | 11.81 |
| Date Public: | 2010-12-13 |
| Date First Published: | 2010-12-13 |
| Date Last Updated: | 2010-12-13 16:08 UTC |
| Document Revision: | 9 |