7.8 - CVE-2011-2749

Executive Summary

Informations
Name	CVE-2011-2749	First vendor Publication	2011-08-15
Vendor	Cve	Last vendor Modification	2020-04-01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score	7.8	Attack Range	Network
Cvss Impact Score	6.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:14727

Oval ID:	oval:org.mitre.oval:def:14727
Title:	USN-1190-1 -- DHCP vulnerabilities
Description:	isc-dhcp: DHCP server and client - dhcp3: DHCP server and client An attacker could send crafted input to DHCP and cause it to crash.
Family:	unix	Class:	patch
Reference(s):	USN-1190-1 CVE-2011-2748 CVE-2011-2749	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 8.04 Ubuntu 10.04 Ubuntu 10.10	Product(s):	DHCP
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND isc-dhcp-server DPKG is earlier than 4.1.1-P1-15ubuntu9.1 OR Release section Ubuntu 8.04 is installed AND Installed architecture is all AND dhcp3-server DPKG is earlier than 3.0.6.dfsg-1ubuntu9.3 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND dhcp3-server DPKG is earlier than 3.1.3-2ubuntu3.3 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND dhcp3-server DPKG is earlier than 3.1.3-2ubuntu6.3

Definition Id: oval:org.mitre.oval:def:14838

Oval ID:	oval:org.mitre.oval:def:14838
Title:	DSA-2292-1 isc-dhcp -- denial of service
Description:	David Zych discovered that the ISC DHCP crashes when processing certain packets, leading to a denial of service.
Family:	unix	Class:	patch
Reference(s):	DSA-2292-1 CVE-2011-2748 CVE-2011-2749	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	isc-dhcp
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND isc-dhcp DPKG is earlier than 3.1.1-6+lenny6 of the dhcp3 package OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND isc-dhcp DPKG is earlier than 4.1.1-P1-15+squeeze3 of the isc-dhcp package

Definition Id: oval:org.mitre.oval:def:21994

Oval ID:	oval:org.mitre.oval:def:21994
Title:	RHSA-2011:1160: dhcp security update (Moderate)
Description:	The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1160-01 CESA-2011:1160 CVE-2011-2748 CVE-2011-2749	Version:	29
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5 CentOS Linux 5 CentOS Linux 6	Product(s):	dhcp
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section libdhcp4client is earlier than 12:3.0.5-29.el5_7.1 AND dhclient is earlier than 12:3.0.5-29.el5_7.1 AND dhcp-devel is earlier than 12:3.0.5-29.el5_7.1 AND dhcp is earlier than 12:3.0.5-29.el5_7.1 AND libdhcp4client-devel is earlier than 12:3.0.5-29.el5_7.1 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section dhclient is earlier than 12:4.1.1-19.P1.el6_1.1 AND dhcp-devel is earlier than 12:4.1.1-19.P1.el6_1.1 AND dhcp is earlier than 12:4.1.1-19.P1.el6_1.1

Definition Id: oval:org.mitre.oval:def:23092

Oval ID:	oval:org.mitre.oval:def:23092
Title:	DEPRECATED: ELSA-2011:1160: dhcp security update (Moderate)
Description:	The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1160-01 CVE-2011-2748 CVE-2011-2749	Version:	14
Platform(s):	Oracle Linux 6 Oracle Linux 5	Product(s):	dhcp
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test libdhcp4client is earlier than 12:3.0.5-29.el5_7.1 AND dhclient is earlier than 12:3.0.5-29.el5_7.1 AND dhcp-devel is earlier than 12:3.0.5-29.el5_7.1 AND dhcp is earlier than 12:3.0.5-29.el5_7.1 AND libdhcp4client-devel is earlier than 12:3.0.5-29.el5_7.1 OR rpm test Oracle Linux 6.x AND rpm test dhclient is earlier than 12:4.1.1-19.P1.el6_1.1 AND dhcp-devel is earlier than 12:4.1.1-19.P1.el6_1.1 AND dhcp is earlier than 12:4.1.1-19.P1.el6_1.1

Definition Id: oval:org.mitre.oval:def:23383

Oval ID:	oval:org.mitre.oval:def:23383
Title:	ELSA-2011:1160: dhcp security update (Moderate)
Description:	The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1160-01 CVE-2011-2748 CVE-2011-2749	Version:	13
Platform(s):	Oracle Linux 6 Oracle Linux 5	Product(s):	dhcp
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test libdhcp4client is earlier than 12:3.0.5-29.el5_7.1 AND dhclient is earlier than 12:3.0.5-29.el5_7.1 AND dhcp-devel is earlier than 12:3.0.5-29.el5_7.1 AND dhcp is earlier than 12:3.0.5-29.el5_7.1 AND libdhcp4client-devel is earlier than 12:3.0.5-29.el5_7.1 OR rpm test Oracle Linux 6.x AND rpm test dhclient is earlier than 12:4.1.1-19.P1.el6_1.1 AND dhcp-devel is earlier than 12:4.1.1-19.P1.el6_1.1 AND dhcp is earlier than 12:4.1.1-19.P1.el6_1.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Isc Dhcp cpe:2.3:a:isc:dhcp:4.2.1:rc1:::::: cpe:2.3:a:isc:dhcp:4.2.1:b1:::::: cpe:2.3:a:isc:dhcp:4.2.1:-:::::: cpe:2.3:a:isc:dhcp:4.2.0:b2:::::: cpe:2.3:a:isc:dhcp:4.2.0:-:::::: cpe:2.3:a:isc:dhcp:4.2.0:rc1:::::: cpe:2.3:a:isc:dhcp:4.2.0:a2:::::: cpe:2.3:a:isc:dhcp:4.2.0:a1:::::: cpe:2.3:a:isc:dhcp:4.2.0:b1:::::: cpe:2.3:a:isc:dhcp:4.2.0:p1:::::: cpe:2.3:a:isc:dhcp:4.1.2:-:::::: cpe:2.3:a:isc:dhcp:4.1.1:b2:::::: cpe:2.3:a:isc:dhcp:4.1.1:b1:::::: cpe:2.3:a:isc:dhcp:4.1.1:-:::::: cpe:2.3:a:isc:dhcp:4.1.1:rc1:::::: cpe:2.3:a:isc:dhcp:4.1.1:b3:::::: cpe:2.3:a:isc:dhcp:4.1.0:-:::::: cpe:2.3:a:isc:dhcp:4.1-esv:-:::::: cpe:2.3:a:isc:dhcp:4.1-esv:r1:::::: cpe:2.3:a:isc:dhcp:4.1-esv:r2:::::: cpe:2.3:a:isc:dhcp:4.1-esv:r3:::::: cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:::::: cpe:2.3:a:isc:dhcp:4.1-esv:rc1:::::: cpe:2.3:a:isc:dhcp:4.0.3:rc1:::::: cpe:2.3:a:isc:dhcp:4.0.3:-:::::: cpe:2.3:a:isc:dhcp:4.0.3:b1:::::: cpe:2.3:a:isc:dhcp:4.0.2:b2:::::: cpe:2.3:a:isc:dhcp:4.0.2:b1:::::: cpe:2.3:a:isc:dhcp:4.0.2:rc1:::::: cpe:2.3:a:isc:dhcp:4.0.2:-:::::: cpe:2.3:a:isc:dhcp:4.0.2:b3:::::: cpe:2.3:a:isc:dhcp:4.0.1:rc1:::::: cpe:2.3:a:isc:dhcp:4.0.1:b1:::::: cpe:2.3:a:isc:dhcp:4.0.1:-:::::: cpe:2.3:a:isc:dhcp:4.0.0:::::::* cpe:2.3:a:isc:dhcp:4.0-esv:::::::* cpe:2.3:a:isc:dhcp:4.0:::::::* cpe:2.3:a:isc:dhcp:3.1.3:-:::::: cpe:2.3:a:isc:dhcp:3.1.3:b1:::::: cpe:2.3:a:isc:dhcp:3.1.3:rc1:::::: cpe:2.3:a:isc:dhcp:3.1.2:rc1:::::: cpe:2.3:a:isc:dhcp:3.1.2:b1:::::: cpe:2.3:a:isc:dhcp:3.1.2:-:::::: cpe:2.3:a:isc:dhcp:3.1.1:rc2:::::: cpe:2.3:a:isc:dhcp:3.1.1:rc1:::::: cpe:2.3:a:isc:dhcp:3.1.1:-:::::: cpe:2.3:a:isc:dhcp:3.1.0:a3:::::: cpe:2.3:a:isc:dhcp:3.1.0:rc1:::::: cpe:2.3:a:isc:dhcp:3.1.0:-:::::: cpe:2.3:a:isc:dhcp:3.1.0:a1:::::: cpe:2.3:a:isc:dhcp:3.1.0:a2:::::: cpe:2.3:a:isc:dhcp:3.1.0:b1:::::: cpe:2.3:a:isc:dhcp:3.1.0:b2:::::: cpe:2.3:a:isc:dhcp:3.1-esv:::::::* cpe:2.3:a:isc:dhcp:3.1:::::::* cpe:2.3:a:isc:dhcp:3.0.6:rc1:::::: cpe:2.3:a:isc:dhcp:3.0.5:-:::::: cpe:2.3:a:isc:dhcp:3.0.5:rc1:::::: cpe:2.3:a:isc:dhcp:3.0.4:-:::::: cpe:2.3:a:isc:dhcp:3.0.4:b1:::::: cpe:2.3:a:isc:dhcp:3.0.4:b2:::::: cpe:2.3:a:isc:dhcp:3.0.4:b3:::::: cpe:2.3:a:isc:dhcp:3.0.4:rc1:::::: cpe:2.3:a:isc:dhcp:3.0.3:b1:::::: cpe:2.3:a:isc:dhcp:3.0.3:b3:::::: cpe:2.3:a:isc:dhcp:3.0.3:b2:::::: cpe:2.3:a:isc:dhcp:3.0.2:rc1:::::: cpe:2.3:a:isc:dhcp:3.0.2:rc2:::::: cpe:2.3:a:isc:dhcp:3.0.2:b1:::::: cpe:2.3:a:isc:dhcp:3.0.2:-:::::: cpe:2.3:a:isc:dhcp:3.0.2:rc3:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc11:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc13:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc5:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc2:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc14:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc6:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc7:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc12:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc9:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc8:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc1:::::: cpe:2.3:a:isc:dhcp:3.0.1:rc10:::::: cpe:2.3:a:isc:dhcp:3.0.1:-:::::: cpe:2.3:a:isc:dhcp:3.0:::::::*	85
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:11.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:8.04::::lts:::	4
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::*	3

OpenVAS Exploits

Date	Description
2012-07-30	Name : CentOS Update for dhclient CESA-2011:1160 centos4 x86_64 File : nvt/gb_CESA-2011_1160_dhclient_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for dhclient CESA-2011:1160 centos5 x86_64 File : nvt/gb_CESA-2011_1160_dhclient_centos5_x86_64.nasl
2012-04-02	Name : Fedora Update for dhcp FEDORA-2011-10667 File : nvt/gb_fedora_2011_10667_dhcp_fc16.nasl
2012-03-12	Name : Debian Security Advisory DSA 2292-1 (isc-dhcp) File : nvt/deb_2292_1.nasl
2012-01-09	Name : Fedora Update for dhcp FEDORA-2011-16976 File : nvt/gb_fedora_2011_16976_dhcp_fc15.nasl
2011-09-23	Name : CentOS Update for dhclient CESA-2011:1160 centos5 i386 File : nvt/gb_CESA-2011_1160_dhclient_centos5_i386.nasl
2011-09-21	Name : FreeBSD Ports: isc-dhcp31-server File : nvt/freebsd_isc-dhcp31-server.nasl
2011-09-12	Name : Fedora Update for dhcp FEDORA-2011-10705 File : nvt/gb_fedora_2011_10705_dhcp_fc14.nasl
2011-08-31	Name : Fedora Update for dhcp FEDORA-2011-10740 File : nvt/gb_fedora_2011_10740_dhcp_fc15.nasl
2011-08-19	Name : CentOS Update for dhclient CESA-2011:1160 centos4 i386 File : nvt/gb_CESA-2011_1160_dhclient_centos4_i386.nasl
2011-08-19	Name : Mandriva Update for dhcp MDVSA-2011:128 (dhcp) File : nvt/gb_mandriva_MDVSA_2011_128.nasl
2011-08-18	Name : RedHat Update for dhcp RHSA-2011:1160-01 File : nvt/gb_RHSA-2011_1160-01_dhcp.nasl
2011-08-18	Name : Ubuntu Update for isc-dhcp USN-1190-1 File : nvt/gb_ubuntu_USN_1190_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
74557	ISC DHCP Crafted BOOTP Packet Remote DoS

Snort® IPS/IDS

Date	Description
2014-01-10	ISC dhcpd bootp request missing options field DOS attempt RuleID : 25342 - Revision : 8 - Type : SERVER-OTHER

Nessus® Vulnerability Scanner

Date	Description
2016-06-22	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2016-0058.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_dhcp-110830.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_dhcp-110830.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1160.nasl - Type : ACT_GATHER_INFO
2013-01-09	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201301-06.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110815_dhcp_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_dhcp-110830.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_dhcp-7716.nasl - Type : ACT_GATHER_INFO
2011-10-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_dhcp-7717.nasl - Type : ACT_GATHER_INFO
2011-09-07	Name : The remote Fedora host is missing a security update. File : fedora_2011-10705.nasl - Type : ACT_GATHER_INFO
2011-08-29	Name : The remote Fedora host is missing a security update. File : fedora_2011-10740.nasl - Type : ACT_GATHER_INFO
2011-08-23	Name : The remote Fedora host is missing a security update. File : fedora_2011-10667.nasl - Type : ACT_GATHER_INFO
2011-08-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-128.nasl - Type : ACT_GATHER_INFO
2011-08-17	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1160.nasl - Type : ACT_GATHER_INFO
2011-08-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1160.nasl - Type : ACT_GATHER_INFO
2011-08-16	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1190-1.nasl - Type : ACT_GATHER_INFO
2011-08-15	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_510b630ec43b11e0916c00e0815b8da8.nasl - Type : ACT_GATHER_INFO
2011-08-12	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2292.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/49120
CONFIRM	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 http://www.isc.org/files/release-notes/DHCP%203.1-ESV-R3_0.html http://www.isc.org/files/release-notes/DHCP%204.1-ESV-R3.html http://www.isc.org/files/release-notes/DHCP%204.2.2_0.html http://www.isc.org/software/dhcp/advisories/cve-2011-2748 https://bugzilla.redhat.com/attachment.cgi?id=517665&action=diff https://bugzilla.redhat.com/show_bug.cgi?id=729382
DEBIAN	http://www.debian.org/security/2011/dsa-2292
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2011-September/0651...
GENTOO	http://security.gentoo.org/glsa/glsa-201301-06.xml
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2011:128
REDHAT	http://www.redhat.com/support/errata/RHSA-2011-1160.html
SECTRACK	http://securitytracker.com/id?1025918
SECUNIA	http://secunia.com/advisories/45582 http://secunia.com/advisories/45595 http://secunia.com/advisories/45629 http://secunia.com/advisories/45639 http://secunia.com/advisories/45817 http://secunia.com/advisories/45918 http://secunia.com/advisories/46780
SUSE	http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html https://hermes.opensuse.org/messages/11695711
UBUNTU	http://www.ubuntu.com/usn/USN-1190-1

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-02-02 01:16:32	Multiple Updates
2024-02-01 12:04:43	Multiple Updates
2023-09-05 12:15:29	Multiple Updates
2023-09-05 01:04:36	Multiple Updates
2023-09-02 12:15:33	Multiple Updates
2023-09-02 01:04:40	Multiple Updates
2023-08-12 12:18:47	Multiple Updates
2023-08-12 01:04:41	Multiple Updates
2023-08-11 12:15:39	Multiple Updates
2023-08-11 01:04:49	Multiple Updates
2023-08-06 12:15:02	Multiple Updates
2023-08-06 01:04:41	Multiple Updates
2023-08-04 12:15:06	Multiple Updates
2023-08-04 01:04:42	Multiple Updates
2023-07-14 12:15:06	Multiple Updates
2023-07-14 01:04:40	Multiple Updates
2023-03-29 01:16:59	Multiple Updates
2023-03-28 12:04:46	Multiple Updates
2022-10-11 12:13:27	Multiple Updates
2022-10-11 01:04:25	Multiple Updates
2021-05-04 12:15:22	Multiple Updates
2021-04-22 01:16:56	Multiple Updates
2020-05-23 00:29:03	Multiple Updates
2016-12-31 09:24:16	Multiple Updates
2016-06-23 13:29:27	Multiple Updates
2016-04-26 20:53:51	Multiple Updates
2014-06-14 13:31:09	Multiple Updates
2014-02-17 11:03:41	Multiple Updates
2013-08-22 13:18:58	Multiple Updates
2013-05-10 23:03:55	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	5
CPE ID(s)	92
Sources(s)	24
osvdb(s)	1
Openvas Exploit(s)	13
Snort® Rule(s)	1
Nessus® Exploit(s)	18

	Related
7.8	USN-1190-1
7.8	RHSA-2011:1160
7.8	MDVSA-2011:128
7.8	GLSA-201301-06
7.8	DSA-2292
7.8	CVE-2011-2748
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)

7.8 - CVE-2011-2749

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU