← Vulnerability feed

Vulnerability record · CVE-2009-1892 · published 17 July 2009

CVE-2009-1892: Isc dhcp vulnerability

Isc · Dhcp

dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests.

5.0 CVSS 2.0 Medium EPSS 8.6% · top 5.1% CWE-16 · CWE-16
5.0CVSS 2.0 base score
8.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/35830 Vendor Advisory
http://secunia.com/advisories/35851 Vendor Advisory
http://secunia.com/advisories/36457
http://secunia.com/advisories/37342
http://www.debian.org/security/2009/dsa-1833 Patch
http://www.mandriva.com/security/advisories?name=MDVSA-2009:154
http://www.securityfocus.com/bid/35669 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/51717
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html
http://secunia.com/advisories/35830 Vendor Advisory
http://secunia.com/advisories/35851 Vendor Advisory
http://secunia.com/advisories/36457
http://secunia.com/advisories/37342
http://www.debian.org/security/2009/dsa-1833 Patch
http://www.mandriva.com/security/advisories?name=MDVSA-2009:154
http://www.securityfocus.com/bid/35669 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/51717
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html

Track CVE-2009-1892 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0692Isc dhcp memory buffer overflow vulnerabilityStack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 b…EPSS 26%7.8CVE-2011-2748Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%7.8CVE-2011-2749Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%7.8CVE-2011-0413Isc dhcp improper input validation vulnerabilityThe DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attacker…EPSS 33%7.5CVE-2018-5732Isc dhcp memory buffer overflow vulnerabilityFailure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause…EPSS 5.2%7.5CVE-2017-3144ISC DHCP OMAPI connection cleanup failure exhausts socket descriptorsISC DHCP fails to properly clean up closed OMAPI connections, so socket descriptors are not released back to the server's pool. Repeated connections …EPSS 73%analysed7.5CVE-2018-5733Isc dhcp integer overflow vulnerabilityA malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit ref…EPSS 20%7.5CVE-2011-0997ISC DHCP dhclient command injection via DHCP hostnamedhclient in ISC DHCP 3.0.x through 4.2.x (before 4.2.1-P1), 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 fails to validate the hostname o…EPSS 84%analysed

Source: NIST National Vulnerability Database (record CVE-2009-1892), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.