CVE-2009-1892: ISC Dhcp

Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days.

dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests.

Affected products

• ISC Dhcp: version 3.0.4 only; version 3.0.4_b1 only; version 3.0.4_b2 only; version 3.0.4_b3 only; version 3.1.1 only

Published 2009-07-17. Last modified 2026-06-16.