Read the docs
TI-2011-02408 Aliases CVE-2011-2749GHSA-r7gx-rv3r-xpf8

The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV…

Priority MEDIUM 61CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.

Why it matters now

EPSS 0.38775 98th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 92

CPEVersionsRoleVendor
cpe:2.3:a:isc:dhcp:3.0:*:*:*:*:*:*:*3.0VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:-:*:*:*:*:*:*3.0.1VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc1:*:*:*:*:*:*3.0.1 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc10:*:*:*:*:*:*3.0.1 rc10VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc11:*:*:*:*:*:*3.0.1 rc11VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc12:*:*:*:*:*:*3.0.1 rc12VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc13:*:*:*:*:*:*3.0.1 rc13VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc14:*:*:*:*:*:*3.0.1 rc14VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc2:*:*:*:*:*:*3.0.1 rc2VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc5:*:*:*:*:*:*3.0.1 rc5VulnerableISC
  • cpe:2.3:a:isc:dhcp:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:-:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc1:*:*:*:*:*:* Versions 3.0.1 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc10:*:*:*:*:*:* Versions 3.0.1 rc10 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc11:*:*:*:*:*:* Versions 3.0.1 rc11 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc12:*:*:*:*:*:* Versions 3.0.1 rc12 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc13:*:*:*:*:*:* Versions 3.0.1 rc13 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc14:*:*:*:*:*:* Versions 3.0.1 rc14 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc2:*:*:*:*:*:* Versions 3.0.1 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc5:*:*:*:*:*:* Versions 3.0.1 rc5 Vulnerable ·ISC
Show 82 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:isc:dhcp:3.0.1:rc6:*:*:*:*:*:*3.0.1 rc6VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc7:*:*:*:*:*:*3.0.1 rc7VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc8:*:*:*:*:*:*3.0.1 rc8VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.1:rc9:*:*:*:*:*:*3.0.1 rc9VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.2:-:*:*:*:*:*:*3.0.2VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.2:b1:*:*:*:*:*:*3.0.2 b1VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.2:rc1:*:*:*:*:*:*3.0.2 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.2:rc2:*:*:*:*:*:*3.0.2 rc2VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.2:rc3:*:*:*:*:*:*3.0.2 rc3VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.3:b1:*:*:*:*:*:*3.0.3 b1VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.3:b2:*:*:*:*:*:*3.0.3 b2VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.3:b3:*:*:*:*:*:*3.0.3 b3VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.4:-:*:*:*:*:*:*3.0.4VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.4:b1:*:*:*:*:*:*3.0.4 b1VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.4:b2:*:*:*:*:*:*3.0.4 b2VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.4:b3:*:*:*:*:*:*3.0.4 b3VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.4:rc1:*:*:*:*:*:*3.0.4 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.5:-:*:*:*:*:*:*3.0.5VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.5:rc1:*:*:*:*:*:*3.0.5 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:3.0.6:rc1:*:*:*:*:*:*3.0.6 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1:*:*:*:*:*:*:*3.1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1-esv:*:*:*:*:*:*:*3.1-esvVulnerableISC
cpe:2.3:a:isc:dhcp:3.1.0:-:*:*:*:*:*:*3.1.0VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.0:a1:*:*:*:*:*:*3.1.0 a1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.0:a2:*:*:*:*:*:*3.1.0 a2VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.0:a3:*:*:*:*:*:*3.1.0 a3VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.0:b1:*:*:*:*:*:*3.1.0 b1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.0:b2:*:*:*:*:*:*3.1.0 b2VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.0:rc1:*:*:*:*:*:*3.1.0 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.1:-:*:*:*:*:*:*3.1.1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.1:rc1:*:*:*:*:*:*3.1.1 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.1:rc2:*:*:*:*:*:*3.1.1 rc2VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.2:-:*:*:*:*:*:*3.1.2VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.2:b1:*:*:*:*:*:*3.1.2 b1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.2:rc1:*:*:*:*:*:*3.1.2 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.3:-:*:*:*:*:*:*3.1.3VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.3:b1:*:*:*:*:*:*3.1.3 b1VulnerableISC
cpe:2.3:a:isc:dhcp:3.1.3:rc1:*:*:*:*:*:*3.1.3 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.0:*:*:*:*:*:*:*4.0VulnerableISC
cpe:2.3:a:isc:dhcp:4.0-esv:*:*:*:*:*:*:*4.0-esvVulnerableISC
cpe:2.3:a:isc:dhcp:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.1:-:*:*:*:*:*:*4.0.1VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.1:b1:*:*:*:*:*:*4.0.1 b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.1:rc1:*:*:*:*:*:*4.0.1 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.2:-:*:*:*:*:*:*4.0.2VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.2:b1:*:*:*:*:*:*4.0.2 b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.2:b2:*:*:*:*:*:*4.0.2 b2VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.2:b3:*:*:*:*:*:*4.0.2 b3VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.2:rc1:*:*:*:*:*:*4.0.2 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.3:-:*:*:*:*:*:*4.0.3VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.3:b1:*:*:*:*:*:*4.0.3 b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.0.3:rc1:*:*:*:*:*:*4.0.3 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*4.1-esvVulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*4.1-esv r1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*4.1-esv r2VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*4.1-esv r3VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*4.1-esv r3_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*4.1-esv rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableISC
cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*4.1.1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*4.1.1 b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*4.1.1 b2VulnerableISC
cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*4.1.1 b3VulnerableISC
cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*4.1.1 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1.2:*:*:*:*:*:*:*4.1.2VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:*4.2.0VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.0:a1:*:*:*:*:*:*4.2.0 a1VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.0:a2:*:*:*:*:*:*4.2.0 a2VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.0:b1:*:*:*:*:*:*4.2.0 b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.0:b2:*:*:*:*:*:*4.2.0 b2VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:*4.2.0 p1VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.0:rc1:*:*:*:*:*:*4.2.0 rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:*4.2.1VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:*4.2.1 b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:*4.2.1 rc1VulnerableISC
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*5.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*6.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*7.0VulnerableDebian
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*8.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*10.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*10.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*11.04VulnerableCanonical
  • cpe:2.3:a:isc:dhcp:3.0.1:rc6:*:*:*:*:*:* Versions 3.0.1 rc6 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc7:*:*:*:*:*:* Versions 3.0.1 rc7 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc8:*:*:*:*:*:* Versions 3.0.1 rc8 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.1:rc9:*:*:*:*:*:* Versions 3.0.1 rc9 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.2:-:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.2:b1:*:*:*:*:*:* Versions 3.0.2 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.2:rc1:*:*:*:*:*:* Versions 3.0.2 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.2:rc2:*:*:*:*:*:* Versions 3.0.2 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.2:rc3:*:*:*:*:*:* Versions 3.0.2 rc3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.3:b1:*:*:*:*:*:* Versions 3.0.3 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.3:b2:*:*:*:*:*:* Versions 3.0.3 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.3:b3:*:*:*:*:*:* Versions 3.0.3 b3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.4:-:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.4:b1:*:*:*:*:*:* Versions 3.0.4 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.4:b2:*:*:*:*:*:* Versions 3.0.4 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.4:b3:*:*:*:*:*:* Versions 3.0.4 b3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.4:rc1:*:*:*:*:*:* Versions 3.0.4 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.5:-:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.5:rc1:*:*:*:*:*:* Versions 3.0.5 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.0.6:rc1:*:*:*:*:*:* Versions 3.0.6 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1-esv:*:*:*:*:*:*:* Versions 3.1-esv Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.0:-:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.0:a1:*:*:*:*:*:* Versions 3.1.0 a1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.0:a2:*:*:*:*:*:* Versions 3.1.0 a2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.0:a3:*:*:*:*:*:* Versions 3.1.0 a3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.0:b1:*:*:*:*:*:* Versions 3.1.0 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.0:b2:*:*:*:*:*:* Versions 3.1.0 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.0:rc1:*:*:*:*:*:* Versions 3.1.0 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.1:-:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.1:rc1:*:*:*:*:*:* Versions 3.1.1 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.1:rc2:*:*:*:*:*:* Versions 3.1.1 rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.2:-:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.2:b1:*:*:*:*:*:* Versions 3.1.2 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.2:rc1:*:*:*:*:*:* Versions 3.1.2 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.3:-:*:*:*:*:*:* Versions 3.1.3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.3:b1:*:*:*:*:*:* Versions 3.1.3 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:3.1.3:rc1:*:*:*:*:*:* Versions 3.1.3 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0-esv:*:*:*:*:*:*:* Versions 4.0-esv Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.1:-:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.1:b1:*:*:*:*:*:* Versions 4.0.1 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.1:rc1:*:*:*:*:*:* Versions 4.0.1 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.2:-:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.2:b1:*:*:*:*:*:* Versions 4.0.2 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.2:b2:*:*:*:*:*:* Versions 4.0.2 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.2:b3:*:*:*:*:*:* Versions 4.0.2 b3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.2:rc1:*:*:*:*:*:* Versions 4.0.2 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.3:-:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.3:b1:*:*:*:*:*:* Versions 4.0.3 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.0.3:rc1:*:*:*:*:*:* Versions 4.0.3 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:* Versions 4.1-esv Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:* Versions 4.1-esv r1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:* Versions 4.1-esv r2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:* Versions 4.1-esv r3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:* Versions 4.1-esv r3_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:* Versions 4.1-esv rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:* Versions 4.1.1 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:* Versions 4.1.1 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:* Versions 4.1.1 b3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:* Versions 4.1.1 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.0:a1:*:*:*:*:*:* Versions 4.2.0 a1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.0:a2:*:*:*:*:*:* Versions 4.2.0 a2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.0:b1:*:*:*:*:*:* Versions 4.2.0 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.0:b2:*:*:*:*:*:* Versions 4.2.0 b2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:* Versions 4.2.0 p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.0:rc1:*:*:*:*:*:* Versions 4.2.0 rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:* Versions 4.2.1 b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:* Versions 4.2.1 rc1 Vulnerable ·ISC
  • cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
  • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:* Versions 8.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:* Versions 10.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:* Versions 10.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:* Versions 11.04 Vulnerable ·Canonical

Remediation

Red Hat 1 advisory

  • RHSA-2011:1160 Released 2011-08-15 · Red Hat rating Moderate
    dhcp security update
    • RHEL Desktop Workstation (v. 5 client) dhcp-12:3.0.5-29.el5_7.1, dhcp-12:3.0.5-29.el5_7.1.i386, dhcp-devel-12:3.0.5-29.el5_7.1 +3
    • Red Hat Enterprise Linux (v. 5 server) dhclient-12:3.0.5-29.el5_7.1, dhclient-12:3.0.5-29.el5_7.1.i386, dhclient-12:3.0.5-29.el5_7.1.ia64 +17
    • Red Hat Enterprise Linux AS version 4 dhclient-7:3.0.1-68.el4, dhclient-7:3.0.1-68.el4.i386, dhclient-7:3.0.1-68.el4.ia64 +9
    • Red Hat Enterprise Linux Desktop (v. 5 client) dhclient-12:3.0.5-29.el5_7.1, dhclient-12:3.0.5-29.el5_7.1.i386, dhcp-12:3.0.5-29.el5_7.1 +2
    • Red Hat Enterprise Linux Desktop version 4 dhclient-7:3.0.1-68.el4, dhclient-7:3.0.1-68.el4.i386, dhcp-7:3.0.1-68.el4 +3
    • Red Hat Enterprise Linux ES version 4 dhclient-7:3.0.1-68.el4, dhclient-7:3.0.1-68.el4.i386, dhclient-7:3.0.1-68.el4.ia64 +6
    • Red Hat Enterprise Linux Server (v. 6) dhclient-12:4.1.1-19.P1.el6_1.1, dhcp-12:4.1.1-19.P1.el6_1.1
    • Red Hat Enterprise Linux Server Optional (v. 6) dhcp-12:4.1.1-19.P1.el6_1.1, dhcp-devel-12:4.1.1-19.P1.el6_1.1, dhcp-devel-12:4.1.1-19.P1.el6_1.1.ppc
    • Red Hat Enterprise Linux WS version 4 dhclient-7:3.0.1-68.el4, dhclient-7:3.0.1-68.el4.i386, dhclient-7:3.0.1-68.el4.ia64 +6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
RHEL Desktop Workstation (v. 5 client)Fixed RHSA-2011:1160
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2011:1160
Red Hat Enterprise Linux AS version 4Fixed RHSA-2011:1160
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2011:1160
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2011:1160
Red Hat Enterprise Linux ES version 4Fixed RHSA-2011:1160
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2011:1160
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2011:1160
Red Hat Enterprise Linux WS version 4Fixed RHSA-2011:1160

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-2749
  2. 2026-10-03 Alias added: GHSA-r7gx-rv3r-xpf8

References

Patch 1

Advisory 14

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences