CVE-2010-3611

Description

ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.

How to fix CVE-2010-3611

To remediate CVE-2010-3611, upgrade the affected package to a fixed version below.

• Debian/isc-dhcp—upgrade to 4.1.1-P1-14 or later

Is CVE-2010-3611 being exploited?

Low — EPSS is 4.9%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 4.1.1-P1-14

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2010-3611