CVE-2010-3611
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote...
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
Exploit likelihood
What each source reports
NVD Score used
4.3
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
- Record
CVE-2010-3611- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
- Record
CVE-2010-3611- Updated
- 2026-11-02
EUVDEUVD-2010-3607 No score
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
- Record
EUVD-2010-3607- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3q9m-cg52-56rj No score
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote...
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
- Record
GHSA-3q9m-cg52-56rj- Updated
- 2026-11-02
OSV No score
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
- Record
CVE-2010-3611- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3611 No score
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
- Record
DEBIAN-CVE-2010-3611- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10358-1 No score
dhcp-4.3.3.P1-3.1 on GA media
These are all security issues fixed in the dhcp-4.3.3.P1-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10358-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
isc-dhcpDebian:12 |
before 4.1.1-P1-14 | 4.1.1-P1-14 |
isc-dhcpDebian:13 |
before 4.1.1-P1-14 | 4.1.1-P1-14 |
dhcpRed Hat:enterprise_linux:6::client |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcp-debuginfoRed Hat:enterprise_linux:6::client |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcp-develRed Hat:enterprise_linux:6::client |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhclientRed Hat:enterprise_linux:6::client |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcpRed Hat:enterprise_linux:6::computenode |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcp-debuginfoRed Hat:enterprise_linux:6::computenode |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcp-develRed Hat:enterprise_linux:6::computenode |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhclientRed Hat:enterprise_linux:6::computenode |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
dhcpRed Hat:enterprise_linux:6::server |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcp-debuginfoRed Hat:enterprise_linux:6::server |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcp-develRed Hat:enterprise_linux:6::server |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhclientRed Hat:enterprise_linux:6::server |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcpRed Hat:enterprise_linux:6::workstation |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcp-debuginfoRed Hat:enterprise_linux:6::workstation |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcp-develRed Hat:enterprise_linux:6::workstation |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhclientRed Hat:enterprise_linux:6::workstation |
before 12:4.1.1-12.P1.el6_0.1 | 12:4.1.1-12.P1.el6_0.1 |
dhcpopenSUSE:Tumbleweed From an advisory covering 16 CVEs |
before 4.3.3.P1-3.1 | 4.3.3.P1-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3611 is a medium vulnerability (CVSS 4.3) in Isc Dhcp, published November 4, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.40%, the 95th percentile. Fixed in isc-dhcp 4.1.1-P1-14.
References
isc.org/software/dhcp/advisories/cve-2010-3611
exchange.xforce.ibmcloud.com/vulnerabilities/62965
secunia.com/advisories/42082
vupen.com/english/advisories/2010/2879
mandriva.com/security/advisories?name=MDVSA-2010:226
secunia.com/advisories/42345
Show 35 moreShow less
vupen.com/english/advisories/2010/3044
redhat.com/support/errata/RHSA-2010-0923.html
bugzilla.redhat.com/show_bug.cgi?id=649877
vupen.com/english/advisories/2010/3092
lists.fedoraproject.org/pipermail/package-announce/2010-November/050766.html
securityfocus.com/bid/44615
osvdb.org/68999
lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
secunia.com/advisories/42407
lists.fedoraproject.org/pipermail/package-announce/2010-November/051287.html
kb.cert.org/vuls/id/102047
nvd.nist.gov/vuln/detail/CVE-2010-3611
github.com/advisories/GHSA-3q9m-cg52-56rj
security-tracker.debian.org/tracker/CVE-2010-3611
access.redhat.com/errata/RHSA-2010:0923
redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0923.json
access.redhat.com/security/cve/CVE-2010-3611
cve.org/CVERecord?id=CVE-2010-3611
suse.com/security/cve/CVE-2009-1892
suse.com/security/cve/CVE-2010-2156
suse.com/security/cve/CVE-2010-3611
suse.com/security/cve/CVE-2010-3616
suse.com/security/cve/CVE-2011-0413
suse.com/security/cve/CVE-2011-0997
suse.com/security/cve/CVE-2011-2748
suse.com/security/cve/CVE-2011-2749
suse.com/security/cve/CVE-2011-4539
suse.com/security/cve/CVE-2011-4868
suse.com/security/cve/CVE-2012-3570
suse.com/security/cve/CVE-2012-3571
suse.com/security/cve/CVE-2012-3954
suse.com/security/cve/CVE-2012-3955
suse.com/security/cve/CVE-2013-2266
suse.com/security/cve/CVE-2015-8605