CVE-2010-2156

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of...

5.0 MediumPublic exploitFix available

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Exploit likelihood

76.2%Down 3.2 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Record: CVE-2010-2156
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Record: CVE-2010-2156
Updated: 2026-11-02

EUVDEUVD-2010-2172 No score

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Record: EUVD-2010-2172
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rrx5-gxgm-9hrg No score

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of...

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Record: GHSA-rrx5-gxgm-9hrg
Updated: 2026-11-02

OSV No score

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Record: CVE-2010-2156
Updated: 2026-11-02

OSVDEBIAN-CVE-2010-2156 No score

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Record: DEBIAN-CVE-2010-2156
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10358-1 No score

dhcp-4.3.3.P1-3.1 on GA media

These are all security issues fixed in the dhcp-4.3.3.P1-3.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10358-1
Updated: 2026-11-02

Affected products

isc dhcp

Affected packages

Affected packages
Package	Affected	Fixed
`isc-dhcp` Debian:12	before 4.1.1-P1-1	4.1.1-P1-1
`isc-dhcp` Debian:13	before 4.1.1-P1-1	4.1.1-P1-1
`dhcp` openSUSE:Tumbleweed From an advisory covering 16 CVEs	before 4.3.3.P1-3.1	4.3.3.P1-3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	ISC DHCPD - Denial of Service	2010-07-03
Metasploit	ISC DHCP Zero Length ClientID Denial of Service Module

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2156 is a medium vulnerability (CVSS 5.0) in Isc Dhcp, published June 7, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 76.2%, the 99th percentile. Fixed in isc-dhcp 4.1.1-P1-1.

References

Show 22 moreShow less