Candidate: CVE-2011-4868 PublicDate: 2012-01-15 03:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4868 https://www.isc.org/software/dhcp/advisories/cve-2011-4868 Description: The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update. Ubuntu-Description: Notes: mdeslaur> vulnerable code was added in 4.2.2, and fixed in 4.2.3-P2 Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_isc-dhcp: upstream_isc-dhcp: needs-triage hardy_isc-dhcp: DNE lucid_isc-dhcp: DNE maverick_isc-dhcp: DNE natty_isc-dhcp: not-affected oneiric_isc-dhcp: not-affected precise_isc-dhcp: not-affected (4.1.ESV-R4-0ubuntu5.1) devel_isc-dhcp: not-affected (4.2.4-1ubuntu4)