Every CVESearch/Get API key

CVE-2012-3954

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6...

3.3 LowFix available

CVE-2012-3954 is a low vulnerability (CVSS 3.3) in Isc Dhcp, published July 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.33%, the 91st percentile. Fixed in isc-dhcp 4.2.4-2.

What does this mean?
Severity
3.3 LowCVSS 2.0, NVD
Exploit chance
4.33%EPSS, 91st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
4.2.4-2isc-dhcp +25 more

Description

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

Exploit likelihood

4.33%Down 0.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
isc-dhcp
Debian:12
before 4.2.4-2
4.2.4-2
isc-dhcp
Debian:13
before 4.2.4-2
4.2.4-2
isc-dhcp
Debian:6.0
From an advisory covering 2 CVEs
before 4.1.1-P1-15+squeeze4, plus listed versions
4.1.1-P1-154.1.1-P1-15+squeeze14.1.1-P1-15+squeeze24.1.1-P1-15+squeeze3
4.1.1-P1-15+squeeze4
isc-dhcp
Debian:6.0
From an advisory covering 3 CVEs
before 4.1.1-P1-15+squeeze5, plus listed versions
4.1.1-P1-154.1.1-P1-15+squeeze14.1.1-P1-15+squeeze24.1.1-P1-15+squeeze34.1.1-P1-15+squeeze4
4.1.1-P1-15+squeeze5
isc-dhcp
Debian:6.0
From an advisory covering 3 CVEs
before 4.1.1-P1-15+squeeze6, plus listed versions
4.1.1-P1-154.1.1-P1-15+squeeze14.1.1-P1-15+squeeze24.1.1-P1-15+squeeze34.1.1-P1-15+squeeze44.1.1-P1-15+squeeze5
4.1.1-P1-15+squeeze6
dhclient
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-common
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
Show 16 moreShow less
Affected packages
PackageAffectedFixed
dhclient
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhclient
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-common
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhclient
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 12:4.1.1-31.P1.el6_3.1
12:4.1.1-31.P1.el6_3.1
dhcp
openSUSE:Tumbleweed
From an advisory covering 16 CVEs
before 4.3.3.P1-3.1
4.3.3.P1-3.1

What each source reports

NVD Score used3.3

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

Record
CVE-2012-3954
CVSS 2.0
3.3 LowAV:A/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE ListNo score

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

Record
CVE-2012-3954
Updated
2026-11-02
EUVDEUVD-2012-3898No score

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

Record
EUVD-2012-3898
Updated
2026-11-03
GitHub AdvisoriesGHSA-v4rv-fwvg-94r2No score

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6...

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

Record
GHSA-v4rv-fwvg-94r2
Updated
2026-11-02
OSVNo score

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

Record
CVE-2012-3954
Updated
2026-11-02
OSVDEBIAN-CVE-2012-3954No score

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

Record
DEBIAN-CVE-2012-3954
Updated
2026-11-02
OSVopenSUSE-SU-2024:10358-1No score

dhcp-4.3.3.P1-3.1 on GA media

These are all security issues fixed in the dhcp-4.3.3.P1-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10358-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 36 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open