Every CVESearch/Get API key

CVE-2011-4539

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle...

5.0 MediumFix available

CVE-2011-4539 is a medium vulnerability (CVSS 5.0) in Isc Dhcp, published December 8, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 15.2%, the 96th percentile. Fixed in isc-dhcp 4.2.2.dfsg.1-5.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
15.2%EPSS, 96th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
4.2.2.dfsg.1-5isc-dhcp +24 more

Description

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Exploit likelihood

15.2%Down 8.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
isc-dhcp
Debian:12
before 4.2.2.dfsg.1-5
4.2.2.dfsg.1-5
isc-dhcp
Debian:13
before 4.2.2.dfsg.1-5
4.2.2.dfsg.1-5
isc-dhcp
Debian:6.0
From an advisory covering 3 CVEs
before 4.1.1-P1-15+squeeze5, plus listed versions
4.1.1-P1-154.1.1-P1-15+squeeze14.1.1-P1-15+squeeze24.1.1-P1-15+squeeze34.1.1-P1-15+squeeze4
4.1.1-P1-15+squeeze5
isc-dhcp
Debian:6.0
From an advisory covering 3 CVEs
before 4.1.1-P1-15+squeeze6, plus listed versions
4.1.1-P1-154.1.1-P1-15+squeeze14.1.1-P1-15+squeeze24.1.1-P1-15+squeeze34.1.1-P1-15+squeeze44.1.1-P1-15+squeeze5
4.1.1-P1-15+squeeze6
dhclient
Red Hat:enterprise_linux:6::client
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp
Red Hat:enterprise_linux:6::client
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-common
Red Hat:enterprise_linux:6::client
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-debuginfo
Red Hat:enterprise_linux:6::client
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-devel
Red Hat:enterprise_linux:6::client
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhclient
Red Hat:enterprise_linux:6::computenode
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
Show 15 moreShow less
Affected packages
PackageAffectedFixed
dhcp
Red Hat:enterprise_linux:6::computenode
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-common
Red Hat:enterprise_linux:6::computenode
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-debuginfo
Red Hat:enterprise_linux:6::computenode
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-devel
Red Hat:enterprise_linux:6::computenode
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhclient
Red Hat:enterprise_linux:6::server
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp
Red Hat:enterprise_linux:6::server
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-common
Red Hat:enterprise_linux:6::server
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-debuginfo
Red Hat:enterprise_linux:6::server
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-devel
Red Hat:enterprise_linux:6::server
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhclient
Red Hat:enterprise_linux:6::workstation
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp
Red Hat:enterprise_linux:6::workstation
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-common
Red Hat:enterprise_linux:6::workstation
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-debuginfo
Red Hat:enterprise_linux:6::workstation
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp-devel
Red Hat:enterprise_linux:6::workstation
before 12:4.1.1-25.P1.el6_2.1
12:4.1.1-25.P1.el6_2.1
dhcp
openSUSE:Tumbleweed
From an advisory covering 16 CVEs
before 4.3.3.P1-3.1
4.3.3.P1-3.1

What each source reports

NVD Score used5.0

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Record
CVE-2011-4539
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Record
CVE-2011-4539
Updated
2026-11-02
EUVDEUVD-2011-4465No score

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Record
EUVD-2011-4465
Updated
2026-11-03
GitHub AdvisoriesGHSA-4mm2-hqgc-vvw9No score

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle...

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Record
GHSA-4mm2-hqgc-vvw9
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Record
CVE-2011-4539
Updated
2026-11-02
OSVDEBIAN-CVE-2011-4539No score

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

Record
DEBIAN-CVE-2011-4539
Updated
2026-11-02
OSVopenSUSE-SU-2024:10358-1No score

dhcp-4.3.3.P1-3.1 on GA media

These are all security issues fixed in the dhcp-4.3.3.P1-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10358-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 32 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open