GCVE - cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*

part: a version: 4.1.0 update: *

Vendor	Isc (`4a2f2b37-98b6-5702-822d-72afcd17d050`)
Product	Dhcp (`4e92e1a9-a8b0-5696-8d39-7119e87ecd86`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/isc-projects/dhcp`	purl2cpe	2026-06-01 10:15:10.728553

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-3144`	vulnerable	2026-06-08 05:09:26.638463	Failure to properly clean up closed OMAPI connections can exhaust available sockets MEDIUM (5.3) A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. Published: 2019-01-16T20:00:00.000Z Updated: 2024-09-16T22:46:13.879Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2018:0158 https://www.debian.org/security/2018/dsa-4133 http://www.securityfocus.com/bid/102726 http://www.securitytracker.com/id/1040194 https://usn.ubuntu.com/3586-1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4868`	vulnerable	2026-06-08 04:59:33.384898	Details available The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update. Published: 2012-01-15T02:00:00.000Z Updated: 2024-08-07T00:16:35.122Z Open on db.gcve.eu Reference links https://kb.isc.org/article/AA-00705 https://www.isc.org/software/dhcp/advisories/cve-2011-4868 https://deepthought.isc.org/article/AA-00595 http://security.gentoo.org/glsa/glsa-201301-06.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2749`	vulnerable	2026-06-08 04:58:09.061951	Details available The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet. Published: 2011-08-15T21:00:00.000Z Updated: 2024-08-06T23:08:23.964Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-1190-1 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html http://secunia.com/advisories/45595 http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html http://www.debian.org/security/2011/dsa-2292	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2748`	vulnerable	2026-06-08 04:58:09.051069	Details available The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet. Published: 2011-08-15T21:00:00.000Z Updated: 2024-08-06T23:08:23.745Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-1190-1 http://redmine.pfsense.org/issues/1888 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html http://secunia.com/advisories/45595 http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3611`	vulnerable	2026-06-08 04:55:15.779798	Details available ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field. Published: 2010-11-04T17:00:00.000Z Updated: 2024-08-07T03:18:52.980Z Open on db.gcve.eu Reference links http://www.isc.org/software/dhcp/advisories/cve-2010-3611 https://exchange.xforce.ibmcloud.com/vulnerabilities/62965 http://secunia.com/advisories/42082 http://www.vupen.com/english/advisories/2010/2879 http://www.mandriva.com/security/advisories?name=MDVSA-2010:226	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2156`	vulnerable	2026-06-08 04:54:11.813647	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0692`	vulnerable	2026-06-08 04:51:10.914583	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.