Vulnerability record · CVE-2011-0413 · published 31 January 2011

CVE-2011-0413: Isc dhcp improper input validation vulnerability

Isc · Dhcp

The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.

7.8 CVSS 2.0 High EPSS 33% · top 1.7% CWE-20 · Improper input validation

7.8CVSS 2.0 base score

33%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

42References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Dhcp Isc

References

Link	Tags
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053644.html	Third Party Advisory
http://secunia.com/advisories/43006	Third Party Advisory
http://secunia.com/advisories/43104	Third Party Advisory
http://secunia.com/advisories/43167	Third Party Advisory
http://secunia.com/advisories/43354	Third Party Advisory
http://secunia.com/advisories/43613	Third Party Advisory
http://securitytracker.com/id?1024999	Third Party AdvisoryVDB Entry
http://www.debian.org/security/2011/dsa-2184	Third Party Advisory
http://www.isc.org/software/dhcp/advisories/cve-2011-0413	Vendor Advisory
http://www.kb.cert.org/vuls/id/686084	Third Party AdvisoryUS Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:022	Third Party Advisory
http://www.osvdb.org/70680	Broken Link
http://www.redhat.com/support/errata/RHSA-2011-0256.html	Third Party Advisory
http://www.securityfocus.com/bid/46035	Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2011/0235	Permissions Required
http://www.vupen.com/english/advisories/2011/0266	Permissions Required
http://www.vupen.com/english/advisories/2011/0300	Permissions Required
http://www.vupen.com/english/advisories/2011/0400	Permissions Required
http://www.vupen.com/english/advisories/2011/0583	Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/64959	Third Party AdvisoryVDB Entry
https://kb.isc.org/article/AA-00456	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053644.html	Third Party Advisory
http://secunia.com/advisories/43006	Third Party Advisory
http://secunia.com/advisories/43104	Third Party Advisory
http://secunia.com/advisories/43167	Third Party Advisory
http://secunia.com/advisories/43354	Third Party Advisory
http://secunia.com/advisories/43613	Third Party Advisory
http://securitytracker.com/id?1024999	Third Party AdvisoryVDB Entry
http://www.debian.org/security/2011/dsa-2184	Third Party Advisory
http://www.isc.org/software/dhcp/advisories/cve-2011-0413	Vendor Advisory
http://www.kb.cert.org/vuls/id/686084	Third Party AdvisoryUS Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:022	Third Party Advisory
http://www.osvdb.org/70680	Broken Link
http://www.redhat.com/support/errata/RHSA-2011-0256.html	Third Party Advisory
http://www.securityfocus.com/bid/46035	Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2011/0235	Permissions Required
http://www.vupen.com/english/advisories/2011/0266	Permissions Required
http://www.vupen.com/english/advisories/2011/0300	Permissions Required
http://www.vupen.com/english/advisories/2011/0400	Permissions Required
http://www.vupen.com/english/advisories/2011/0583	Permissions Required

Track CVE-2011-0413 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0692Isc dhcp memory buffer overflow vulnerabilityStack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 b…EPSS 26%14 Jul 2009 7.8CVE-2011-2748Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%15 Aug 2011 7.8CVE-2011-2749Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%15 Aug 2011 7.5CVE-2018-5732Isc dhcp memory buffer overflow vulnerabilityFailure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause…EPSS 5.2%9 Oct 2019 7.5CVE-2017-3144ISC DHCP OMAPI connection cleanup failure exhausts socket descriptorsISC DHCP fails to properly clean up closed OMAPI connections, so socket descriptors are not released back to the server's pool. Repeated connections …EPSS 73%analysed16 Jan 2019 7.5CVE-2018-5733Isc dhcp integer overflow vulnerabilityA malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit ref…EPSS 20%16 Jan 2019 7.5CVE-2011-0997ISC DHCP dhclient command injection via DHCP hostnamedhclient in ISC DHCP 3.0.x through 4.2.x (before 4.2.1-P1), 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 fails to validate the hostname o…EPSS 84%analysed8 Apr 2011 7.4CVE-2021-25217Isc dhcp memory buffer overflow vulnerabilityIn ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases …EPSS 6.1%26 May 2021

Source: NIST National Vulnerability Database (record CVE-2011-0413), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.