VULNERABILITY INTELLIGENCE
CVE-2011-0413
CVSS score7.8 HIGH
EPSS probability32.92%
CISA KEVNot currently listed
Published2011-01-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory, VDB Entry
- cret@cert.org — Third Party Advisory
- cret@cert.org — Vendor Advisory
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Third Party Advisory
- cret@cert.org — Broken Link