DHCP: ISC DHCP Server DUID Handling Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in ISC DHCP Server. It is due to lack of bounds checking when parsing the client DUID (DHCP unique identifier). Successful exploitation would result in execution of arbitrary code in the context of the affected application. Failed exploitation will cause denial-of-service.

Extended Description

ISC DHCP is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to cause the affected application to crash, resulting in a denial-of-service condition.

Affected Products

Isc dhcp_server

References

BugTraq: 54665

CVE: CVE-2012-3570

URL: https://kb.isc.org/article/AA-00714

Short Name

DHCP:SERVER:ISC-DUID-BO

Severity

Major

Recommended

False

Recommended Action

Drop

DHCP: ISC DHCP Server DUID Handling Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?