← Vulnerability feed

Vulnerability record · CVE-2003-0039 · published 7 February 2003

CVE-2003-0039: Isc dhcpd vulnerability

Isc · Dhcpd

ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.

5.0 CVSS 2.0 Medium EPSS 8.0% · top 5.5%
5.0CVSS 2.0 base score
8.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://cc.turbolinux.com/security/TLSA-2003-26.txt
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000616
http://marc.info/?l=bugtraq&m=104310927813830&w=2
http://www.debian.org/security/2003/dsa-245 PatchVendor Advisory
http://www.kb.cert.org/vuls/id/149953 US Government Resource
http://www.openpkg.org/security/OpenPKG-SA-2003.012-dhcpd.html
http://www.redhat.com/support/errata/RHSA-2003-034.html
http://www.securityfocus.com/bid/6628
https://exchange.xforce.ibmcloud.com/vulnerabilities/11187
http://cc.turbolinux.com/security/TLSA-2003-26.txt
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000616
http://marc.info/?l=bugtraq&m=104310927813830&w=2
http://www.debian.org/security/2003/dsa-245 PatchVendor Advisory
http://www.kb.cert.org/vuls/id/149953 US Government Resource
http://www.openpkg.org/security/OpenPKG-SA-2003.012-dhcpd.html
http://www.redhat.com/support/errata/RHSA-2003-034.html
http://www.securityfocus.com/bid/6628
https://exchange.xforce.ibmcloud.com/vulnerabilities/11187

Track CVE-2003-0039 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-1006Isc dhcpd vulnerabilityFormat string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, …EPSS 8.0%10.0CVE-2004-0460ISC DHCP dhcpd logging buffer overflow via hostname optionsISC DHCP 3.0.1rc12 and 3.0.1rc13 contain a buffer overflow in the DHCP daemon's logging capability. Multiple hostname options in DISCOVER, OFFER, REQ…EPSS 45%analysed10.0CVE-2004-0461Infoblox dns one appliance vulnerabilityThe DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C includ…EPSS 17%10.0CVE-2002-0702Isc dhcpd vulnerabilityFormat string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE opti…EPSS 31%7.5CVE-2019-6470Isc dhcpd vulnerabilityThere had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in …EPSS 8.8%7.5CVE-2003-0026Isc dhcpd vulnerabilityMultiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 thr…EPSS 19%5.0CVE-2006-3122Isc dhcpd vulnerabilityThe supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) v…EPSS 4.0%

Source: NIST National Vulnerability Database (record CVE-2003-0039), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.