Description
ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | dhcp3 | 3.0+3.0.1rc9-2.2 | DSA-245 |
Advisories 1
- DSA-245 dhcp3 - ignored counter boundary Debian Security (DSA / DLA) · Mar 9, 2026
References
- CLSA-2003:616 vendor-advisory
- VU#149953 third-party-advisory
- DSA-245 vendor-advisory
- TLSA-2003-26 vendor-advisory
- RHSA-2003:034 vendor-advisory
- 20030219 [OpenPKG-SA-2003.012] OpenPKG Security Advisory (dhcpd) mailing-list
- dhcp-dhcrelay-dos(11187) vdb-entry
- 20030115 DoS against DHCP infrastructure with isc dhcrelay mailing-list
- 6628 vdb-entry