Description
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | isc-dhcp | 4.1.1-P1-14 | — |
| Debian 12 | isc-dhcp | 4.1.1-P1-14 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | dhcp +2 | 12:4.1.1-12.P1.el6_0.1 | RHSA-2010:0923 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | dhcp | 4.3.3.P1-3.1 | openSUSE-SU-2024:10358-1 |
Advisories 2
- RHSA-2010:0923 Red Hat Security Advisory: dhcp security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10358-1 dhcp-4.3.3.P1-3.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- http://www.isc.org/software/dhcp/advisories/cve-2010-3611
- iscdhcp-relayforward-dos(62965) vdb-entry
- 42082 third-party-advisory
- ADV-2010-2879 vdb-entry
- MDVSA-2010:226 vendor-advisory
- 42345 third-party-advisory
- ADV-2010-3044 vdb-entry
- RHSA-2010:0923 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=649877
- ADV-2010-3092 vdb-entry
- FEDORA-2010-17312 vendor-advisory
- 44615 vdb-entry
- 68999 vdb-entry
- SUSE-SR:2010:021 vendor-advisory
- 42407 third-party-advisory
- FEDORA-2010-17303 vendor-advisory
- VU#102047 third-party-advisory