CVE-2012-3955
Status: ModifiedHigh (7.1)—
ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
- Base score: 7.1
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 22%
- Percentile among all scored CVEs: 98
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (3)
CWEs
- NVD-CWE-noinfo
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2013-0504.html
- http://secunia.com/advisories/51318
- http://security.gentoo.org/glsa/glsa-201301-06.xml
- http://www.debian.org/security/2012/dsa-2551
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:153
- http://www.securityfocus.com/bid/55530
- http://www.securitytracker.com/id?1027528
- http://www.ubuntu.com/usn/USN-1571-1
- https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of
- https://kb.isc.org/article/AA-00779
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2013-0504.html
- http://secunia.com/advisories/51318
- http://security.gentoo.org/glsa/glsa-201301-06.xml
- http://www.debian.org/security/2012/dsa-2551
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:153
- http://www.securityfocus.com/bid/55530
- http://www.securitytracker.com/id?1027528
- http://www.ubuntu.com/usn/USN-1571-1
- https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of
- https://kb.isc.org/article/AA-00779
Raw JSON (NVD)
Show
{
"id": "CVE-2012-3955",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.1,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-09-14T10:33:21.307",
"references": [
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/51318",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://security.gentoo.org/glsa/glsa-201301-06.xml",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2012/dsa-2551",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/55530",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1027528",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.ubuntu.com/usn/USN-1571-1",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://kb.isc.org/article/AA-00779",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2013-0504.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/51318",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://security.gentoo.org/glsa/glsa-201301-06.xml",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2012/dsa-2551",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:153",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/55530",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1027528",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/USN-1571-1",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://kb.isc.org/article/AA-00779",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced."
},
{
"lang": "es",
"value": "ISC DHCP v4.1-4.1.x antes de v4.1-ESV-R7 y v4.2.x antes de v4.2.4-P2 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) en determinadas circunstancias mediante el establecimiento de un 'lease' IPv6 en un entorno donde la expiración del leasing es posteriormente reducida.\r\n"
}
],
"lastModified": "2026-06-16T23:44:07.480",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F27D0660-2F07-430B-A651-5D0B6AA763C0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBAABA4E-0D34-4644-AC26-E272CEE6C361"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5E2FFC7-6E73-463E-846C-C403E41A2022"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9D08285-745D-40AB-9A78-F467712CDA5A"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D115F1F-1A3A-4924-AF10-723B3BB0CBB9"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79F235F0-AD16-4E5B-AB60-97F0BB86AEB6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E84D5E5B-0336-4166-AAAC-49375E3AF971"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09561C97-563C-4DDC-9EE4-E83EFFD467D6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "519CF0CC-FB12-4C68-88A0-E0E15738C620"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80EB131E-32E5-458F-8DDA-48835D2D883F"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65E0296F-3522-4B43-AF34-CFE1AE7EEC1E"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3120B566-2BB6-4A1F-9ED7-E099E2870919"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78214BCE-9739-40B9-A32E-89C16F7195DC"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40C764F4-8FAD-477E-92E5-79D234673478"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36045DDB-48C6-48CA-AAAF-A3487EF7A537"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECA81B95-97B7-4A56-A448-6E5DB6FA5F76"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A91F4FD9-1797-4B9C-AFB8-EC6445119DA4"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4479C934-BF9A-428F-AD22-41C45B70C546"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11EE9507-6827-4CFF-B3B4-9DC4DE3E0B1C"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6CE1A0F-BE1E-4312-B68F-F09B05929F9C"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17B6DEFA-0977-474A-9871-B03DEE924ADA"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09F19067-DD99-4B26-8125-0801459ED6B0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B63D409-60F5-4AB9-A576-8672D42E071E"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA5D825C-B72A-44F5-AF24-4F3200881ABA"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A1C3F3E-CFB2-40F2-89F4-735AAE042F65"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF49D26F-142E-468B-87C1-BABEA445255C"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4174F4F-149E-41A6-BBCC-D01114C05F38"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}