← Vulnerability feed

Vulnerability record · CVE-2010-3611 · published 4 November 2010

CVE-2010-3611: Isc dhcp vulnerability

Isc · Dhcp

ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.

4.3 CVSS 2.0 Medium EPSS 9.4% · top 4.8%
4.3CVSS 2.0 base score
9.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
34References
16 Jun 2026Last modified by NVD

Description

ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050766.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051287.html
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
http://osvdb.org/68999
http://secunia.com/advisories/42082 Vendor Advisory
http://secunia.com/advisories/42345
http://secunia.com/advisories/42407
http://www.isc.org/software/dhcp/advisories/cve-2010-3611 Vendor Advisory
http://www.kb.cert.org/vuls/id/102047 US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2010:226
http://www.redhat.com/support/errata/RHSA-2010-0923.html
http://www.securityfocus.com/bid/44615
http://www.vupen.com/english/advisories/2010/2879 PatchVendor Advisory
http://www.vupen.com/english/advisories/2010/3044
http://www.vupen.com/english/advisories/2010/3092
https://bugzilla.redhat.com/show_bug.cgi?id=649877
https://exchange.xforce.ibmcloud.com/vulnerabilities/62965
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050766.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051287.html
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
http://osvdb.org/68999
http://secunia.com/advisories/42082 Vendor Advisory
http://secunia.com/advisories/42345
http://secunia.com/advisories/42407
http://www.isc.org/software/dhcp/advisories/cve-2010-3611 Vendor Advisory
http://www.kb.cert.org/vuls/id/102047 US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2010:226
http://www.redhat.com/support/errata/RHSA-2010-0923.html
http://www.securityfocus.com/bid/44615
http://www.vupen.com/english/advisories/2010/2879 PatchVendor Advisory
http://www.vupen.com/english/advisories/2010/3044
http://www.vupen.com/english/advisories/2010/3092
https://bugzilla.redhat.com/show_bug.cgi?id=649877
https://exchange.xforce.ibmcloud.com/vulnerabilities/62965

Track CVE-2010-3611 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0692Isc dhcp memory buffer overflow vulnerabilityStack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 b…EPSS 26%7.8CVE-2011-2748Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%7.8CVE-2011-2749Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%7.8CVE-2011-0413Isc dhcp improper input validation vulnerabilityThe DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attacker…EPSS 33%7.5CVE-2018-5732Isc dhcp memory buffer overflow vulnerabilityFailure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause…EPSS 5.2%7.5CVE-2017-3144ISC DHCP OMAPI connection cleanup failure exhausts socket descriptorsISC DHCP fails to properly clean up closed OMAPI connections, so socket descriptors are not released back to the server's pool. Repeated connections …EPSS 73%analysed7.5CVE-2018-5733Isc dhcp integer overflow vulnerabilityA malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit ref…EPSS 20%7.5CVE-2011-0997ISC DHCP dhclient command injection via DHCP hostnamedhclient in ISC DHCP 3.0.x through 4.2.x (before 4.2.1-P1), 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 fails to validate the hostname o…EPSS 84%analysed

Source: NIST National Vulnerability Database (record CVE-2010-3611), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.