VULNERABILITY INTELLIGENCE

CVE-2006-3122

CVSS score5 MEDIUM
EPSS probability4.02%
CISA KEVNot currently listed
Published2006-08-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with "corrupt lease uid."

Primary references