CVE-2011-4868: ISC Dhcp

Medium severity, CVSS 6.1. EPSS: 3.4% chance of exploitation in the next 30 days.

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.

Affected products

• ISC Dhcp: up to and including 4.2.3; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …

Published 2012-01-15. Last modified 2026-06-16.