CVE-2006-3122

Published: 9 August 2006

The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with "corrupt lease uid."

Notes

Author	Note
kees	server denial-of-service

Priority

Status

Package	Release	Status
dhcp Launchpad, Ubuntu, Debian	dapper	Ignored (end of life)
	edgy	Ignored (end of life, was needed)
	feisty	Released (2.0pl5-19.5ubuntu2)
	gutsy	Released (2.0pl5-19.5ubuntu2)
	hardy	Does not exist
	intrepid	Does not exist
	jaunty	Does not exist
	upstream	Released (3.1.0)

References

https://www.cve.org/CVERecord?id=CVE-2006-3122
NVD
Launchpad
Debian

Bugs

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380273

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›