← Vulnerability feed

Vulnerability record · CVE-2010-3616 · published 17 December 2010

CVE-2010-3616: Isc dhcp improper input validation vulnerability

Isc · Dhcp

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.

5.0 CVSS 2.0 Medium EPSS 7.9% · top 5.5% CWE-20 · Improper input validation
5.0CVSS 2.0 base score
7.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052329.html
http://secunia.com/advisories/42618 Vendor Advisory
http://secunia.com/advisories/42682
http://www.kb.cert.org/vuls/id/159528 US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:001
http://www.securityfocus.com/bid/45360
http://www.securitytracker.com/id?1024862
http://www.vupen.com/english/advisories/2010/3208 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0052
https://lists.isc.org/pipermail/dhcp-users/2010-December/012368.html
https://www.isc.org/software/dhcp/advisories/cve-2010-3616 Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052329.html
http://secunia.com/advisories/42618 Vendor Advisory
http://secunia.com/advisories/42682
http://www.kb.cert.org/vuls/id/159528 US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:001
http://www.securityfocus.com/bid/45360
http://www.securitytracker.com/id?1024862
http://www.vupen.com/english/advisories/2010/3208 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0052
https://lists.isc.org/pipermail/dhcp-users/2010-December/012368.html
https://www.isc.org/software/dhcp/advisories/cve-2010-3616 Vendor Advisory

Track CVE-2010-3616 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0692Isc dhcp memory buffer overflow vulnerabilityStack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 b…EPSS 26%7.8CVE-2011-2748Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%7.8CVE-2011-2749Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%7.8CVE-2011-0413Isc dhcp improper input validation vulnerabilityThe DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attacker…EPSS 33%7.5CVE-2018-5732Isc dhcp memory buffer overflow vulnerabilityFailure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause…EPSS 5.2%7.5CVE-2017-3144ISC DHCP OMAPI connection cleanup failure exhausts socket descriptorsISC DHCP fails to properly clean up closed OMAPI connections, so socket descriptors are not released back to the server's pool. Repeated connections …EPSS 73%analysed7.5CVE-2018-5733Isc dhcp integer overflow vulnerabilityA malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit ref…EPSS 20%7.5CVE-2011-0997ISC DHCP dhclient command injection via DHCP hostnamedhclient in ISC DHCP 3.0.x through 4.2.x (before 4.2.1-P1), 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 fails to validate the hostname o…EPSS 84%analysed

Source: NIST National Vulnerability Database (record CVE-2010-3616), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.