CVE-2010-3611: ISC Dhcp

Medium severity, CVSS 4.3. EPSS: 9.4% chance of exploitation in the next 30 days.

ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.

Affected products

• ISC Dhcp: version 4.0 only; version 4.0.0 only; version 4.0.1 only; version 4.1.0 only; version 4.1.1 only; version 4.2.0 only

Published 2010-11-04. Last modified 2026-06-16.