Upstream information

CVE-2011-4539 at MITRE

Description

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 5
Vector AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Partial
SUSE Bugzilla entries: 735610 [RESOLVED / FIXED], 741239 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 12
  • dhcp >= 4.2.6-7.3
  • dhcp-client >= 4.2.6-7.3
Patchnames:
SUSE Linux Enterprise Desktop 12 GA dhcp
SUSE Linux Enterprise Desktop 12 SP1
  • dhcp >= 4.3.3-2.2
  • dhcp-client >= 4.3.3-2.2
Patchnames:
SUSE Linux Enterprise Desktop 12 SP1 GA dhcp
SUSE Linux Enterprise Desktop 12 SP2
  • dhcp >= 4.3.3-9.1
  • dhcp-client >= 4.3.3-9.1
Patchnames:
SUSE Linux Enterprise Desktop 12 SP2 GA dhcp
SUSE Linux Enterprise Desktop 12 SP3
  • dhcp >= 4.3.3-9.1
  • dhcp-client >= 4.3.3-9.1
Patchnames:
SUSE Linux Enterprise Desktop 12 SP3 GA dhcp
SUSE Linux Enterprise Module for Basesystem 15
  • dhcp >= 4.3.5-4.15
  • dhcp-client >= 4.3.5-4.15
  • dhcp-devel >= 4.3.5-4.15
Patchnames:
SUSE Linux Enterprise Module for Basesystem 15 GA dhcp
SUSE Linux Enterprise Module for Server Applications 15
  • dhcp-relay >= 4.3.5-4.15
  • dhcp-server >= 4.3.5-4.15
Patchnames:
SUSE Linux Enterprise Module for Server Applications 15 GA dhcp-relay
SUSE Linux Enterprise Server 11 SP2
  • dhcp >= 4.2.3.P2-0.7.2
  • dhcp-client >= 4.2.3.P2-0.7.2
  • dhcp-relay >= 4.2.3.P2-0.7.2
  • dhcp-server >= 4.2.3.P2-0.7.2
Patchnames:
SUSE Linux Enterprise Server 11 SP2 GA dhcp
SUSE Linux Enterprise Server 11 SP3
  • dhcp >= 4.2.4.P2-0.16.15
  • dhcp-client >= 4.2.4.P2-0.16.15
  • dhcp-relay >= 4.2.4.P2-0.16.15
  • dhcp-server >= 4.2.4.P2-0.16.15
Patchnames:
SUSE Linux Enterprise Server 11 SP3 GA dhcp
SUSE Linux Enterprise Server 11 SP4
  • dhcp >= 4.2.4.P2-0.22.1
  • dhcp-client >= 4.2.4.P2-0.22.1
  • dhcp-relay >= 4.2.4.P2-0.22.1
  • dhcp-server >= 4.2.4.P2-0.22.1
Patchnames:
SUSE Linux Enterprise Server 11 SP4 GA dhcp
SUSE Linux Enterprise Server 12
  • dhcp >= 4.2.6-7.3
  • dhcp-client >= 4.2.6-7.3
  • dhcp-relay >= 4.2.6-7.3
  • dhcp-server >= 4.2.6-7.3
Patchnames:
SUSE Linux Enterprise Server 12 GA dhcp
SUSE Linux Enterprise Server 12 SP1
  • dhcp >= 4.3.3-2.2
  • dhcp-client >= 4.3.3-2.2
  • dhcp-relay >= 4.3.3-2.2
  • dhcp-server >= 4.3.3-2.2
Patchnames:
SUSE Linux Enterprise Server 12 SP1 GA dhcp
SUSE Linux Enterprise Server 12 SP2
  • dhcp >= 4.3.3-9.1
  • dhcp-client >= 4.3.3-9.1
  • dhcp-relay >= 4.3.3-9.1
  • dhcp-server >= 4.3.3-9.1
Patchnames:
SUSE Linux Enterprise Server 12 SP2 GA dhcp
SUSE Linux Enterprise Server 12 SP3
  • dhcp >= 4.3.3-9.1
  • dhcp-client >= 4.3.3-9.1
  • dhcp-relay >= 4.3.3-9.1
  • dhcp-server >= 4.3.3-9.1
Patchnames:
SUSE Linux Enterprise Server 12 SP3 GA dhcp
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
  • dhcp >= 4.3.3-9.1
  • dhcp-client >= 4.3.3-9.1
  • dhcp-relay >= 4.3.3-9.1
  • dhcp-server >= 4.3.3-9.1
Patchnames:
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 GA dhcp
SUSE Linux Enterprise Software Development Kit 11 SP4
  • dhcp-devel >= 4.2.4.P2-0.22.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 11 SP4 GA dhcp-devel
SUSE Linux Enterprise Software Development Kit 12
  • dhcp-devel >= 4.2.6-7.3
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 GA dhcp-devel
SUSE Linux Enterprise Software Development Kit 12 SP1
  • dhcp-devel >= 4.3.3-2.2
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP1 GA dhcp-devel
SUSE Linux Enterprise Software Development Kit 12 SP2
  • dhcp-devel >= 4.3.3-9.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP2 GA dhcp-devel
SUSE Linux Enterprise Software Development Kit 12 SP3
  • dhcp-devel >= 4.3.3-9.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP3 GA dhcp-devel
openSUSE 11.3
  • dhcp-client-debuginfo >= 4.1.2.ESV.1-0.12.1
  • dhcp-debuginfo >= 4.1.2.ESV.1-0.12.1
  • dhcp-debugsource >= 4.1.2.ESV.1-0.12.1
  • dhcp-relay-debuginfo >= 4.1.2.ESV.1-0.12.1
  • dhcp-server-debuginfo >= 4.1.2.ESV.1-0.12.1
openSUSE 11.3
  • dhcp >= 4.1.2.ESV.1-0.12.1
  • dhcp-client >= 4.1.2.ESV.1-0.12.1
  • dhcp-devel >= 4.1.2.ESV.1-0.12.1
  • dhcp-doc >= 4.1.2.ESV.1-0.12.1
  • dhcp-relay >= 4.1.2.ESV.1-0.12.1
  • dhcp-server >= 4.1.2.ESV.1-0.12.1
openSUSE 11.4
  • dhcp >= 4.2.1-0.11.1
  • dhcp-client >= 4.2.1-0.11.1
  • dhcp-devel >= 4.2.1-0.11.1
  • dhcp-doc >= 4.2.1-0.11.1
  • dhcp-relay >= 4.2.1-0.11.1
  • dhcp-server >= 4.2.1-0.11.1
openSUSE 11.4
  • dhcp >= 4.2.1-0.11.1
  • dhcp-client >= 4.2.1-0.11.1
  • dhcp-client-debuginfo >= 4.2.1-0.11.1
  • dhcp-debuginfo >= 4.2.1-0.11.1
  • dhcp-debugsource >= 4.2.1-0.11.1
  • dhcp-devel >= 4.2.1-0.11.1
  • dhcp-doc >= 4.2.1-0.11.1
  • dhcp-relay >= 4.2.1-0.11.1
  • dhcp-relay-debuginfo >= 4.2.1-0.11.1
  • dhcp-server >= 4.2.1-0.11.1
  • dhcp-server-debuginfo >= 4.2.1-0.11.1
Patchnames:
dhcp
openSUSE Leap 15.0
  • dhcp >= 4.3.5-lp150.4.1
  • dhcp-client >= 4.3.5-lp150.4.1
Patchnames:
openSUSE Leap 15.0 GA dhcp
openSUSE Leap 42.1
  • dhcp >= 4.3.3-2.1
  • dhcp-client >= 4.3.3-2.1
  • dhcp-doc >= 4.3.3-2.1
  • dhcp-relay >= 4.3.3-2.1
  • dhcp-server >= 4.3.3-2.1
Patchnames:
openSUSE Leap 42.1 GA dhcp
openSUSE Leap 42.2
  • dhcp >= 4.3.3-8.1
  • dhcp-client >= 4.3.3-8.1
  • dhcp-doc >= 4.3.3-8.1
  • dhcp-relay >= 4.3.3-8.1
  • dhcp-server >= 4.3.3-8.1
Patchnames:
openSUSE Leap 42.2 GA dhcp
openSUSE Leap 42.3
  • dhcp >= 4.3.3-10.4
  • dhcp-client >= 4.3.3-10.4
  • dhcp-doc >= 4.3.3-10.4
  • dhcp-relay >= 4.3.3-10.4
  • dhcp-server >= 4.3.3-10.4
Patchnames:
openSUSE Leap 42.3 GA dhcp
openSUSE Tumbleweed
  • dhcp >= 4.3.3.P1-3.1
  • dhcp-client >= 4.3.3.P1-3.1
  • dhcp-devel >= 4.3.3.P1-3.1
  • dhcp-doc >= 4.3.3.P1-3.1
  • dhcp-relay >= 4.3.3.P1-3.1
  • dhcp-server >= 4.3.3.P1-3.1
Patchnames:
openSUSE Tumbleweed GA dhcp