CVE-2011-0413
The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 32.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 32.58% probability · 98th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- isc/dhcp
- Source
- cret@cert.org
EPSS 32.6% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053644.htmlThird Party Advisory
- http://secunia.com/advisories/43006Third Party Advisory
- http://secunia.com/advisories/43104Third Party Advisory
- http://secunia.com/advisories/43167Third Party Advisory
- http://secunia.com/advisories/43354Third Party Advisory
- http://secunia.com/advisories/43613Third Party Advisory
- http://securitytracker.com/id?1024999Third Party Advisory, VDB Entry
- http://www.debian.org/security/2011/dsa-2184Third Party Advisory
- http://www.isc.org/software/dhcp/advisories/cve-2011-0413Vendor Advisory
- http://www.kb.cert.org/vuls/id/686084Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:022Third Party Advisory
- http://www.osvdb.org/70680Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-0256.htmlThird Party Advisory
- http://www.securityfocus.com/bid/46035Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2011/0235Permissions Required
- http://www.vupen.com/english/advisories/2011/0266Permissions Required
- http://www.vupen.com/english/advisories/2011/0300Permissions Required
- http://www.vupen.com/english/advisories/2011/0400Permissions Required
- http://www.vupen.com/english/advisories/2011/0583Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64959Third Party Advisory, VDB Entry
- https://kb.isc.org/article/AA-00456Vendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053644.htmlThird Party Advisory
- http://secunia.com/advisories/43006Third Party Advisory
- http://secunia.com/advisories/43104Third Party Advisory
- http://secunia.com/advisories/43167Third Party Advisory
- http://secunia.com/advisories/43354Third Party Advisory
- http://secunia.com/advisories/43613Third Party Advisory
- http://securitytracker.com/id?1024999Third Party Advisory, VDB Entry
- http://www.debian.org/security/2011/dsa-2184Third Party Advisory
- http://www.isc.org/software/dhcp/advisories/cve-2011-0413Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.