← Vulnerability feed

Vulnerability record · CVE-2006-3122 · published 9 August 2006

CVE-2006-3122: Isc dhcpd vulnerability

Isc · Dhcpd

The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with "corrupt lease uid."

5.0 CVSS 2.0 Medium EPSS 4.0% · top 9.8% CWE-399 · CWE-399
5.0CVSS 2.0 base score
4.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with "corrupt lease uid."

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380273
http://secunia.com/advisories/21345 PatchVendor Advisory
http://secunia.com/advisories/21363 PatchVendor Advisory
http://secunia.com/advisories/21655
http://securitytracker.com/id?1016755
http://www.debian.org/security/2006/dsa-1143 Patch
http://www.openbsd.org/errata.html#dhcpd
http://www.securityfocus.com/bid/19348
http://www.vupen.com/english/advisories/2006/3158 Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380273
http://secunia.com/advisories/21345 PatchVendor Advisory
http://secunia.com/advisories/21363 PatchVendor Advisory
http://secunia.com/advisories/21655
http://securitytracker.com/id?1016755
http://www.debian.org/security/2006/dsa-1143 Patch
http://www.openbsd.org/errata.html#dhcpd
http://www.securityfocus.com/bid/19348
http://www.vupen.com/english/advisories/2006/3158 Vendor Advisory

Track CVE-2006-3122 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-1006Isc dhcpd vulnerabilityFormat string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, …EPSS 8.0%10.0CVE-2004-0460ISC DHCP dhcpd logging buffer overflow via hostname optionsISC DHCP 3.0.1rc12 and 3.0.1rc13 contain a buffer overflow in the DHCP daemon's logging capability. Multiple hostname options in DISCOVER, OFFER, REQ…EPSS 45%analysed10.0CVE-2004-0461Infoblox dns one appliance vulnerabilityThe DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C includ…EPSS 17%10.0CVE-2002-0702Isc dhcpd vulnerabilityFormat string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE opti…EPSS 31%7.5CVE-2019-6470Isc dhcpd vulnerabilityThere had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in …EPSS 8.8%7.5CVE-2003-0026Isc dhcpd vulnerabilityMultiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 thr…EPSS 19%5.0CVE-2003-0039Isc dhcpd vulnerabilityISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a …EPSS 8.0%8.8CVE-2010-0806Microsoft Internet Explorer Peer Objects use-after-free allows remote code executionInternet Explorer 6, 6 SP1 and 7 contain a use-after-free in the Peer Objects component (iepeers.dll), where an object is accessed after deletion, le…KEVEPSS 82%analysed

Source: NIST National Vulnerability Database (record CVE-2006-3122), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.