CVE-2012-3570

Severity: medium (CVSS 5.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-07-25 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.

Affected products

ISC DHCP: 4.2.0, 4.2.0-a1, 4.2.0-a2, 4.2.0-b1, 4.2.0-b2, 4.2.0-p1 (+11)

References

http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html
http://security.gentoo.org/glsa/glsa-201301-06.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2012:115
http://www.securityfocus.com/bid/54665
https://kb.isc.org/article/AA-00714
http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html
http://security.gentoo.org/glsa/glsa-201301-06.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2012:115
http://www.securityfocus.com/bid/54665
https://kb.isc.org/article/AA-00714

Get alerted when CVE-2012-3570 or the next vulnerability affects your stack