Vulnerability-Lookup

CVE-2012-3955 (GCVE-0-2012-3955)

Vulnerability from cvelistv5 – Published: 2012-09-14 10:00 – Updated: 2024-08-06 20:21

Summary

ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-updates/2012-0…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1571-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-updates/2012-0…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2012/dsa-2551	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/51318	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.securityfocus.com/bid/55530	vdb-entryx_refsource_BID
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2013-0504.html	vendor-advisoryx_refsource_REDHAT
https://blogs.oracle.com/sunsecurity/entry/cve_20…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2012-0…	vendor-advisoryx_refsource_SUSE
http://security.gentoo.org/glsa/glsa-201301-06.xml	vendor-advisoryx_refsource_GENTOO
https://kb.isc.org/article/AA-00779	x_refsource_CONFIRM
http://www.securitytracker.com/id?1027528	vdb-entryx_refsource_SECTRACK

Date Public

2012-09-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.060Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2012-14149",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html"
          },
          {
            "name": "openSUSE-SU-2012:1252",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html"
          },
          {
            "name": "USN-1571-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1571-1"
          },
          {
            "name": "openSUSE-SU-2012:1234",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html"
          },
          {
            "name": "DSA-2551",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2551"
          },
          {
            "name": "51318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51318"
          },
          {
            "name": "MDVSA-2012:153",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153"
          },
          {
            "name": "FEDORA-2012-13910",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html"
          },
          {
            "name": "55530",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55530"
          },
          {
            "name": "FEDORA-2012-14076",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html"
          },
          {
            "name": "RHSA-2013:0504",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
          },
          {
            "name": "openSUSE-SU-2012:1254",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html"
          },
          {
            "name": "GLSA-201301-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201301-06.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.isc.org/article/AA-00779"
          },
          {
            "name": "1027528",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027528"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-09-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2012-09-29T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2012-14149",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html"
        },
        {
          "name": "openSUSE-SU-2012:1252",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html"
        },
        {
          "name": "USN-1571-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1571-1"
        },
        {
          "name": "openSUSE-SU-2012:1234",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html"
        },
        {
          "name": "DSA-2551",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2551"
        },
        {
          "name": "51318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51318"
        },
        {
          "name": "MDVSA-2012:153",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153"
        },
        {
          "name": "FEDORA-2012-13910",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html"
        },
        {
          "name": "55530",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55530"
        },
        {
          "name": "FEDORA-2012-14076",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html"
        },
        {
          "name": "RHSA-2013:0504",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
        },
        {
          "name": "openSUSE-SU-2012:1254",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html"
        },
        {
          "name": "GLSA-201301-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201301-06.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.isc.org/article/AA-00779"
        },
        {
          "name": "1027528",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027528"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3955",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2012-14149",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html"
            },
            {
              "name": "openSUSE-SU-2012:1252",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html"
            },
            {
              "name": "USN-1571-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1571-1"
            },
            {
              "name": "openSUSE-SU-2012:1234",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html"
            },
            {
              "name": "DSA-2551",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2551"
            },
            {
              "name": "51318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51318"
            },
            {
              "name": "MDVSA-2012:153",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153"
            },
            {
              "name": "FEDORA-2012-13910",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html"
            },
            {
              "name": "55530",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55530"
            },
            {
              "name": "FEDORA-2012-14076",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html"
            },
            {
              "name": "RHSA-2013:0504",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html"
            },
            {
              "name": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of",
              "refsource": "CONFIRM",
              "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
            },
            {
              "name": "openSUSE-SU-2012:1254",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html"
            },
            {
              "name": "GLSA-201301-06",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201301-06.xml"
            },
            {
              "name": "https://kb.isc.org/article/AA-00779",
              "refsource": "CONFIRM",
              "url": "https://kb.isc.org/article/AA-00779"
            },
            {
              "name": "1027528",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027528"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3955",
    "datePublished": "2012-09-14T10:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.060Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2012-3955",
      "date": "2026-09-15",
      "epss": "0.21653",
      "percentile": "0.97492"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"F27D0660-2F07-430B-A651-5D0B6AA763C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"FBAABA4E-0D34-4644-AC26-E272CEE6C361\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"A5E2FFC7-6E73-463E-846C-C403E41A2022\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"E9D08285-745D-40AB-9A78-F467712CDA5A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*\", \"matchCriteriaId\": \"1D115F1F-1A3A-4924-AF10-723B3BB0CBB9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*\", \"matchCriteriaId\": \"79F235F0-AD16-4E5B-AB60-97F0BB86AEB6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*\", \"matchCriteriaId\": \"E84D5E5B-0336-4166-AAAC-49375E3AF971\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*\", \"matchCriteriaId\": \"09561C97-563C-4DDC-9EE4-E83EFFD467D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"519CF0CC-FB12-4C68-88A0-E0E15738C620\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"80EB131E-32E5-458F-8DDA-48835D2D883F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*\", \"matchCriteriaId\": \"65E0296F-3522-4B43-AF34-CFE1AE7EEC1E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"3120B566-2BB6-4A1F-9ED7-E099E2870919\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"78214BCE-9739-40B9-A32E-89C16F7195DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*\", \"matchCriteriaId\": \"40C764F4-8FAD-477E-92E5-79D234673478\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*\", \"matchCriteriaId\": \"36045DDB-48C6-48CA-AAAF-A3487EF7A537\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*\", \"matchCriteriaId\": \"ECA81B95-97B7-4A56-A448-6E5DB6FA5F76\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"A91F4FD9-1797-4B9C-AFB8-EC6445119DA4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*\", \"matchCriteriaId\": \"4479C934-BF9A-428F-AD22-41C45B70C546\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*\", \"matchCriteriaId\": \"11EE9507-6827-4CFF-B3B4-9DC4DE3E0B1C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*\", \"matchCriteriaId\": \"E6CE1A0F-BE1E-4312-B68F-F09B05929F9C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"17B6DEFA-0977-474A-9871-B03DEE924ADA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"09F19067-DD99-4B26-8125-0801459ED6B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B63D409-60F5-4AB9-A576-8672D42E071E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*\", \"matchCriteriaId\": \"CA5D825C-B72A-44F5-AF24-4F3200881ABA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"9A1C3F3E-CFB2-40F2-89F4-735AAE042F65\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"036E8A89-7A16-411F-9D31-676313BB7244\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16F59A04-14CF-49E2-9973-645477EA09DA\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EF49D26F-142E-468B-87C1-BABEA445255C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E4174F4F-149E-41A6-BBCC-D01114C05F38\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.\"}, {\"lang\": \"es\", \"value\": \"ISC DHCP v4.1-4.1.x antes de v4.1-ESV-R7 y v4.2.x antes de v4.2.4-P2 permite a atacantes remotos provocar una denegaci\\u00f3n de servicio (ca\\u00edda del demonio) en determinadas circunstancias mediante el establecimiento de un \u0027lease\u0027 IPv6 en un entorno donde la expiraci\\u00f3n del leasing es posteriormente reducida.\\r\\n\"}]",
      "id": "CVE-2012-3955",
      "lastModified": "2024-11-21T01:41:52.910",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:N/A:C\", \"baseScore\": 7.1, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2012-09-14T10:33:21.307",
      "references": "[{\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2013-0504.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/51318\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-201301-06.xml\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2012/dsa-2551\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2012:153\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/55530\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id?1027528\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-1571-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://kb.isc.org/article/AA-00779\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2013-0504.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/51318\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-201301-06.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2012/dsa-2551\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2012:153\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/55530\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id?1027528\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-1571-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://kb.isc.org/article/AA-00779\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2012-3955\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2012-09-14T10:33:21.307\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.\"},{\"lang\":\"es\",\"value\":\"ISC DHCP v4.1-4.1.x antes de v4.1-ESV-R7 y v4.2.x antes de v4.2.4-P2 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) en determinadas circunstancias mediante el establecimiento de un \u0027lease\u0027 IPv6 en un entorno donde la expiraci\u00f3n del leasing es posteriormente reducida.\\r\\n\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:C\",\"baseScore\":7.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"F27D0660-2F07-430B-A651-5D0B6AA763C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"FBAABA4E-0D34-4644-AC26-E272CEE6C361\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5E2FFC7-6E73-463E-846C-C403E41A2022\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9D08285-745D-40AB-9A78-F467712CDA5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D115F1F-1A3A-4924-AF10-723B3BB0CBB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*\",\"matchCriteriaId\":\"79F235F0-AD16-4E5B-AB60-97F0BB86AEB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*\",\"matchCriteriaId\":\"E84D5E5B-0336-4166-AAAC-49375E3AF971\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*\",\"matchCriteriaId\":\"09561C97-563C-4DDC-9EE4-E83EFFD467D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"519CF0CC-FB12-4C68-88A0-E0E15738C620\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"80EB131E-32E5-458F-8DDA-48835D2D883F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*\",\"matchCriteriaId\":\"65E0296F-3522-4B43-AF34-CFE1AE7EEC1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3120B566-2BB6-4A1F-9ED7-E099E2870919\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"78214BCE-9739-40B9-A32E-89C16F7195DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*\",\"matchCriteriaId\":\"40C764F4-8FAD-477E-92E5-79D234673478\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*\",\"matchCriteriaId\":\"36045DDB-48C6-48CA-AAAF-A3487EF7A537\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECA81B95-97B7-4A56-A448-6E5DB6FA5F76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"A91F4FD9-1797-4B9C-AFB8-EC6445119DA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4479C934-BF9A-428F-AD22-41C45B70C546\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*\",\"matchCriteriaId\":\"11EE9507-6827-4CFF-B3B4-9DC4DE3E0B1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6CE1A0F-BE1E-4312-B68F-F09B05929F9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"17B6DEFA-0977-474A-9871-B03DEE924ADA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"09F19067-DD99-4B26-8125-0801459ED6B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B63D409-60F5-4AB9-A576-8672D42E071E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA5D825C-B72A-44F5-AF24-4F3200881ABA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A1C3F3E-CFB2-40F2-89F4-735AAE042F65\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"036E8A89-7A16-411F-9D31-676313BB7244\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF49D26F-142E-468B-87C1-BABEA445255C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4174F4F-149E-41A6-BBCC-D01114C05F38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"}]}]}],\"references\":[{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0504.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/51318\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201301-06.xml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2012/dsa-2551\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2012:153\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/55530\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id?1027528\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-1571-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kb.isc.org/article/AA-00779\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0504.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/51318\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201301-06.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2012/dsa-2551\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2012:153\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/55530\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id?1027528\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-1571-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kb.isc.org/article/AA-00779\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T12:50:48+00:00",
      "cve": "CVE-2012-3955",
      "id": "CVE-2012-3955",
      "initial_release_date": "2012-09-12T00:00:00+00:00",
      "product_status:fixed": "200",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "dhcp: reduced expiration time of an IPv6 lease may cause dhcpd to crash",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-3955.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-26T01:46:44Z",
      "cve": "CVE-2012-3955",
      "id": "CVE-2012-3955",
      "initial_release_date": "2023-02-15T05:45:25Z",
      "product_status:known_affected": "8",
      "product_status:recommended": "195",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2012-3955",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2012-3955.json",
      "version": "18"
    }
  }
}

CERTA-2012-AVI-501

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été corrigée dans ISC DHCP. Elle concerne un déni de service qui est provoquée lorsque l'on réduit le temps d'expiration d'un bail IPv6 actif.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

ISC DHCP versions 4.1.x et 4.2.x.

Les versions 4.0 peuvent également être affectées mais ne sont plus maintenues.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité ISC du 12 septembre 2012

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eISC DHCP versions 4.1.x et 4.2.x.\u003c/P\u003e  \u003cP\u003eLes versions 4.0 peuvent \u00e9galement \u00eatre affect\u00e9es mais ne sont  plus maintenues.\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-3955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3955"
    }
  ],
  "links": [],
  "reference": "CERTA-2012-AVI-501",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-09-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eISC\nDHCP\u003c/span\u003e. Elle concerne un d\u00e9ni de service qui est provoqu\u00e9e lorsque\nl\u0027on r\u00e9duit le temps d\u0027expiration d\u0027un bail IPv6 actif.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans ISC DHCP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 ISC du 12 septembre 2012",
      "url": "https://kb.isc.org/article/AA-00779/75"
    }
  ]
}

CERTA-2012-AVI-679

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été corrigée dans Oracle Solaris ISC DHCP. Elle permet à un attaquant de provoquer un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Oracle Solaris branche 11.x

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Oracle du 20 novembre 2012

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eOracle Solaris branche 11.x\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-3955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3955"
    }
  ],
  "links": [],
  "reference": "CERTA-2012-AVI-679",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-11-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eOracle\nSolaris ISC DHCP\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni\nde service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Oracle Solaris ISC DHCP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 20 novembre 2012",
      "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
    }
  ]
}

CERTA-2012-AVI-501

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été corrigée dans ISC DHCP. Elle concerne un déni de service qui est provoquée lorsque l'on réduit le temps d'expiration d'un bail IPv6 actif.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

ISC DHCP versions 4.1.x et 4.2.x.

Les versions 4.0 peuvent également être affectées mais ne sont plus maintenues.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité ISC du 12 septembre 2012

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eISC DHCP versions 4.1.x et 4.2.x.\u003c/P\u003e  \u003cP\u003eLes versions 4.0 peuvent \u00e9galement \u00eatre affect\u00e9es mais ne sont  plus maintenues.\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-3955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3955"
    }
  ],
  "links": [],
  "reference": "CERTA-2012-AVI-501",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-09-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eISC\nDHCP\u003c/span\u003e. Elle concerne un d\u00e9ni de service qui est provoqu\u00e9e lorsque\nl\u0027on r\u00e9duit le temps d\u0027expiration d\u0027un bail IPv6 actif.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans ISC DHCP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 ISC du 12 septembre 2012",
      "url": "https://kb.isc.org/article/AA-00779/75"
    }
  ]
}

CERTA-2012-AVI-679

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été corrigée dans Oracle Solaris ISC DHCP. Elle permet à un attaquant de provoquer un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Oracle Solaris branche 11.x

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Oracle du 20 novembre 2012

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eOracle Solaris branche 11.x\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-3955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3955"
    }
  ],
  "links": [],
  "reference": "CERTA-2012-AVI-679",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-11-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eOracle\nSolaris ISC DHCP\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni\nde service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Oracle Solaris ISC DHCP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 20 novembre 2012",
      "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
    }
  ]
}

FKIE_CVE-2012-3955

Vulnerability from fkie_nvd - Published: 2012-09-14 10:33 - Updated: 2026-06-16 23:44

Severity

Summary

References

URL	Tags
cve@mitre.org	http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html	Third Party Advisory
cve@mitre.org	http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html	Third Party Advisory
cve@mitre.org	http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html	Third Party Advisory
cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html	Mailing List, Third Party Advisory
cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html	Mailing List, Third Party Advisory
cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html	Mailing List, Third Party Advisory
cve@mitre.org	http://rhn.redhat.com/errata/RHSA-2013-0504.html	Third Party Advisory
cve@mitre.org	http://secunia.com/advisories/51318	Third Party Advisory
cve@mitre.org	http://security.gentoo.org/glsa/glsa-201301-06.xml	Third Party Advisory
cve@mitre.org	http://www.debian.org/security/2012/dsa-2551	Third Party Advisory
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDVSA-2012:153	Third Party Advisory
cve@mitre.org	http://www.securityfocus.com/bid/55530	Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securitytracker.com/id?1027528	Third Party Advisory, VDB Entry
cve@mitre.org	http://www.ubuntu.com/usn/USN-1571-1	Third Party Advisory
cve@mitre.org	https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of	Third Party Advisory
cve@mitre.org	https://kb.isc.org/article/AA-00779	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2013-0504.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/51318	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-201301-06.xml	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2012/dsa-2551	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDVSA-2012:153	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/55530	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1027528	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-1571-1	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://kb.isc.org/article/AA-00779	Vendor Advisory

Impacted products

Vendor	Product	Version
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1-esv
isc	dhcp	4.1.0
isc	dhcp	4.1.0
isc	dhcp	4.1.0
isc	dhcp	4.1.0
isc	dhcp	4.1.1
isc	dhcp	4.1.1
isc	dhcp	4.1.1
isc	dhcp	4.1.1
isc	dhcp	4.1.1
isc	dhcp	4.1.2
isc	dhcp	4.1.2
isc	dhcp	4.1.2
isc	dhcp	4.1.2
debian	debian_linux	6.0
debian	debian_linux	7.0
canonical	ubuntu_linux	10.04
canonical	ubuntu_linux	11.04
canonical	ubuntu_linux	11.10
canonical	ubuntu_linux	12.04

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
              "matchCriteriaId": "F27D0660-2F07-430B-A651-5D0B6AA763C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
              "matchCriteriaId": "FBAABA4E-0D34-4644-AC26-E272CEE6C361",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
              "matchCriteriaId": "A5E2FFC7-6E73-463E-846C-C403E41A2022",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
              "matchCriteriaId": "E9D08285-745D-40AB-9A78-F467712CDA5A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
              "matchCriteriaId": "1D115F1F-1A3A-4924-AF10-723B3BB0CBB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
              "matchCriteriaId": "79F235F0-AD16-4E5B-AB60-97F0BB86AEB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
              "matchCriteriaId": "E84D5E5B-0336-4166-AAAC-49375E3AF971",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
              "matchCriteriaId": "09561C97-563C-4DDC-9EE4-E83EFFD467D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "519CF0CC-FB12-4C68-88A0-E0E15738C620",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
              "matchCriteriaId": "80EB131E-32E5-458F-8DDA-48835D2D883F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
              "matchCriteriaId": "65E0296F-3522-4B43-AF34-CFE1AE7EEC1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "3120B566-2BB6-4A1F-9ED7-E099E2870919",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "78214BCE-9739-40B9-A32E-89C16F7195DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*",
              "matchCriteriaId": "40C764F4-8FAD-477E-92E5-79D234673478",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*",
              "matchCriteriaId": "36045DDB-48C6-48CA-AAAF-A3487EF7A537",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*",
              "matchCriteriaId": "ECA81B95-97B7-4A56-A448-6E5DB6FA5F76",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*",
              "matchCriteriaId": "A91F4FD9-1797-4B9C-AFB8-EC6445119DA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*",
              "matchCriteriaId": "4479C934-BF9A-428F-AD22-41C45B70C546",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*",
              "matchCriteriaId": "11EE9507-6827-4CFF-B3B4-9DC4DE3E0B1C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*",
              "matchCriteriaId": "E6CE1A0F-BE1E-4312-B68F-F09B05929F9C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "17B6DEFA-0977-474A-9871-B03DEE924ADA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*",
              "matchCriteriaId": "09F19067-DD99-4B26-8125-0801459ED6B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*",
              "matchCriteriaId": "9B63D409-60F5-4AB9-A576-8672D42E071E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*",
              "matchCriteriaId": "CA5D825C-B72A-44F5-AF24-4F3200881ABA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "9A1C3F3E-CFB2-40F2-89F4-735AAE042F65",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "5D37DF0F-F863-45AC-853A-3E04F9FEC7CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF49D26F-142E-468B-87C1-BABEA445255C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4174F4F-149E-41A6-BBCC-D01114C05F38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced."
    },
    {
      "lang": "es",
      "value": "ISC DHCP v4.1-4.1.x antes de v4.1-ESV-R7 y v4.2.x antes de v4.2.4-P2 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) en determinadas circunstancias mediante el establecimiento de un \u0027lease\u0027 IPv6 en un entorno donde la expiraci\u00f3n del leasing es posteriormente reducida.\r\n"
    }
  ],
  "id": "CVE-2012-3955",
  "lastModified": "2026-06-16T23:44:07.480",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-09-14T10:33:21.307",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://secunia.com/advisories/51318"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://security.gentoo.org/glsa/glsa-201301-06.xml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2012/dsa-2551"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/55530"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id?1027528"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-1571-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://kb.isc.org/article/AA-00779"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://secunia.com/advisories/51318"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://security.gentoo.org/glsa/glsa-201301-06.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2012/dsa-2551"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/55530"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id?1027528"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-1571-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://kb.isc.org/article/AA-00779"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-6XCV-87WR-7RFM

Vulnerability from github – Published: 2022-05-13 01:29 – Updated: 2022-05-13 01:29

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2012-3955"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2012-09-14T10:33:00Z",
    "severity": "HIGH"
  },
  "details": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.",
  "id": "GHSA-6xcv-87wr-7rfm",
  "modified": "2022-05-13T01:29:00Z",
  "published": "2022-05-13T01:29:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3955"
    },
    {
      "type": "WEB",
      "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
    },
    {
      "type": "WEB",
      "url": "https://kb.isc.org/article/AA-00779"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/51318"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-201301-06.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2012/dsa-2551"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/55530"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1027528"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-1571-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2012-3955

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2012-3955

Aliases

CVE-2012-3955

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2012-3955",
    "description": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.",
    "id": "GSD-2012-3955",
    "references": [
      "https://www.suse.com/security/cve/CVE-2012-3955.html",
      "https://www.debian.org/security/2012/dsa-2551",
      "https://access.redhat.com/errata/RHSA-2013:0504",
      "https://alas.aws.amazon.com/cve/html/CVE-2012-3955.html",
      "https://linux.oracle.com/cve/CVE-2012-3955.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2012-3955"
      ],
      "details": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.",
      "id": "GSD-2012-3955",
      "modified": "2023-12-13T01:20:20.478301Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2012-3955",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "FEDORA-2012-14149",
            "refsource": "FEDORA",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html"
          },
          {
            "name": "openSUSE-SU-2012:1252",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html"
          },
          {
            "name": "USN-1571-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-1571-1"
          },
          {
            "name": "openSUSE-SU-2012:1234",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html"
          },
          {
            "name": "DSA-2551",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2012/dsa-2551"
          },
          {
            "name": "51318",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/51318"
          },
          {
            "name": "MDVSA-2012:153",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153"
          },
          {
            "name": "FEDORA-2012-13910",
            "refsource": "FEDORA",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html"
          },
          {
            "name": "55530",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/55530"
          },
          {
            "name": "FEDORA-2012-14076",
            "refsource": "FEDORA",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html"
          },
          {
            "name": "RHSA-2013:0504",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html"
          },
          {
            "name": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of",
            "refsource": "CONFIRM",
            "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
          },
          {
            "name": "openSUSE-SU-2012:1254",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html"
          },
          {
            "name": "GLSA-201301-06",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-201301-06.xml"
          },
          {
            "name": "https://kb.isc.org/article/AA-00779",
            "refsource": "CONFIRM",
            "url": "https://kb.isc.org/article/AA-00779"
          },
          {
            "name": "1027528",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1027528"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3955"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.isc.org/article/AA-00779",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://kb.isc.org/article/AA-00779"
            },
            {
              "name": "openSUSE-SU-2012:1234",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html"
            },
            {
              "name": "USN-1571-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-1571-1"
            },
            {
              "name": "openSUSE-SU-2012:1252",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html"
            },
            {
              "name": "openSUSE-SU-2012:1254",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html"
            },
            {
              "name": "DSA-2551",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2012/dsa-2551"
            },
            {
              "name": "55530",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/55530"
            },
            {
              "name": "1027528",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id?1027528"
            },
            {
              "name": "RHSA-2013:0504",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html"
            },
            {
              "name": "MDVSA-2012:153",
              "refsource": "MANDRIVA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153"
            },
            {
              "name": "FEDORA-2012-14149",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html"
            },
            {
              "name": "FEDORA-2012-13910",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html"
            },
            {
              "name": "FEDORA-2012-14076",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html"
            },
            {
              "name": "51318",
              "refsource": "SECUNIA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://secunia.com/advisories/51318"
            },
            {
              "name": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of"
            },
            {
              "name": "GLSA-201301-06",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://security.gentoo.org/glsa/glsa-201301-06.xml"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2020-01-08T17:16Z",
      "publishedDate": "2012-09-14T10:33Z"
    }
  }
}

OPENSUSE-SU-2024:10358-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

dhcp-4.3.3.P1-3.1 on GA media

Severity

Moderate

Scope

16 vulnerabilities in this advisory, including CVE-2012-3955.

CVE-2012-3955

Recommended: 24 products

Open the full advisory

RHSA-2013:0504

Vulnerability from csaf_redhat - Published: 2013-02-20 16:18 - Updated: 2026-06-25 10:39

Summary

Red Hat Security Advisory: dhcp security and bug fix update

Severity

Low

Scope

1 vulnerability in this advisory, including CVE-2012-3955.

CVE-2012-3955

A flaw was found in the way the dhcpd daemon handled the expiration time of IPv6 leases. If dhcpd's configuration was changed to reduce the default IPv6 lease time, lease renewal requests for previously assigned leases could cause dhcpd to crash.

2.9 ()


                
                  AV:A/AC:M/Au:N/C:N/I:N/A:P

Fixed: 68 products

https://access.redhat.com/errata/RHSA-2013:0504

Open the full advisory

RHSA-2013_0504

Vulnerability from csaf_redhat - Published: 2013-02-20 16:18 - Updated: 2024-11-22 05:45

Summary

Red Hat Security Advisory: dhcp security and bug fix update

Severity

Low

Scope

1 vulnerability in this advisory, including CVE-2012-3955.

CVE-2012-3955

2.9 ()


                
                  AV:A/AC:M/Au:N/C:N/I:N/A:P

Fixed: 200 products

https://access.redhat.com/errata/RHSA-2013:0504

Open the full advisory

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2012-3955 (GCVE-0-2012-3955)

Solution

Solution

Solution

Solution

Tags

Sightings

Nomenclature

Related by attack behaviour