CVE-2006-3122: ISC Dhcpd

Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days.

The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with "corrupt lease uid."

Affected products

• ISC Dhcpd: up to and including 2.0pl5

Published 2006-08-09. Last modified 2026-06-16.