CVE-2011-0997: canonical ubuntu_linux Improper Input Validation

CVSS: 7.5v2.0HighModified

AliasesRHSA-2011:0428RHSA-2011:0840DEBIAN-CVE-2011-0997+2 more

Published 08-04-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-0997 is a high (CVSS 7.5) Improper Input Validation vulnerability in canonical ubuntu_linux. EPSS estimates a 84.57% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

57/100

0100

High · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

84.57%

0%100%

Critical · +0.28 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10358-1

Timeline

08-04-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

84.57%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

+0.28 pp

From 84.29% on 18-09-2026

18-09-202618-10-2026

EPSS score

84.57%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasehardwareUnverified
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
Maturity: poc

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Redhat6 products

dhclient< 7:3.0.1-67.el4 | < 12:3.0.5-23.el5_6.4 | < 12:4.1.1-12.P1.el6_0.4 | < 7:3.0.1-10.3_EL3
dhcp< 7:3.0.1-67.el4 | < 12:3.0.5-23.el5_6.4 | < 12:4.1.1-12.P1.el6_0.4 | < 7:3.0.1-10.3_EL3
dhcp-debuginfo< 7:3.0.1-67.el4 | < 12:3.0.5-23.el5_6.4 | < 12:4.1.1-12.P1.el6_0.4 | < 7:3.0.1-10.3_EL3
dhcp-devel< 7:3.0.1-67.el4 | < 12:3.0.5-23.el5_6.4 | < 12:4.1.1-12.P1.el6_0.4 | < 7:3.0.1-10.3_EL3
libdhcp4client< 12:3.0.5-23.el5_6.4

Show all 6

Debian3 products

dhcp3< 3.1.1-6+lenny5
isc-dhcp< 4.1.1-P1-16.1 | < 4.1.1-P1-15+squeeze2
debian_linuxEOL5.0 | 6.0 | 7.0

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.10 | 10.04 | 10.10

Isc1 product

dhcp3.0 | 3.0.1 | 3.0.1:rc1 | 3.0.1:rc10 | 3.0.1:rc11 | 3.0.1:rc12 | 3.0.1:rc13 | 3.0.1:rc14 | 3.0.1:rc2 | 3.0.1:rc5 | 3.0.1:rc6 | 3.0.1:rc7 | 3.0.1:rc8 | 3.0.1:rc9 | 3.0.2 | 3.0.2:b1 | 3.0.2:rc1 | 3.0.2:rc2 | 3.0.2:rc3 | 3.0.3 | 3.0.3:b1 | 3.0.3:b2 | 3.0.3:b3 | 3.0.4 | 3.0.4:b1 | 3.0.4:b2 | 3.0.4:b3 | 3.0.4:rc1 | 3.0.5 | 3.0.5:rc1 | 3.0.6:rc1 | 3.1-esv | 3.1.0 | 3.1.0:a1 | 3.1.0:a2 | 3.1.0:a3 | 3.1.0:b1 | 3.1.0:b2 | 3.1.0:rc1 | 3.1.1:rc1 | 3.1.1:rc2 | 3.1.2 | 3.1.2:b1 | 3.1.2:rc1 | 3.1.3 | 3.1.3:b1 | 3.1.3:rc1 | 4.1-esv | 4.1-esv:rc1 | 4.2.0 | 4.2.0:a1 | 4.2.0:a2 | 4.2.0:b1 | 4.2.0:b2 | 4.2.0:p1 | 4.2.0:rc1 | 4.2.1 | 4.2.1:b1 | 4.2.1:rc1

4 vendors · 11 products

References

44 links

www.securityfocus.com/bid/47176VDB EntryX Refsource BIDThird Party Advisory
www.vupen.com/english/advisories/2011/0886VDB EntryX Refsource VUPENPermissions Required
secunia.com/advisories/44103Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2011-0840.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/44037Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=689832X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
www.vupen.com/english/advisories/2011/0926VDB EntryX Refsource VUPENPermissions Required
marc.info?l=bugtraq&m=133226187115472&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/44127Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2011:073Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory

Show all 44 references

www.vupen.com/english/advisories/2011/0909VDB EntryX Refsource VUPENPermissions Required
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12812VDB EntrySignatureX Refsource OVALThird Party Advisory
www.osvdb.org/71493VDB EntryX Refsource OSVDBBroken Link
secunia.com/advisories/44090Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/44048Third Party AdvisoryX Refsource SECUNIA
lists.fedoraproject.org/pipermail/package-announce/2011-April/058279.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.isc.org/software/dhcp/advisories/cve-2011-0997X Refsource CONFIRMPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/66580VDB EntryX Refsource XFThird Party Advisory
www.vupen.com/english/advisories/2011/0879VDB EntryX Refsource VUPENPermissions Required
www.kb.cert.org/vuls/id/107886Third Party AdvisoryX Refsource CERT VNUS Government Resource
securitytracker.com/id?1025300VDB EntryX Refsource SECTRACKThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10761X Refsource CONFIRMThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
www.vupen.com/english/advisories/2011/1000VDB EntryX Refsource VUPENPermissions Required
www.vupen.com/english/advisories/2011/0915VDB EntryX Refsource VUPENPermissions Required
www.vupen.com/english/advisories/2011/0965VDB EntryX Refsource VUPENPermissions Required
www.exploit-db.com/exploits/37623/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/glsa-201301-06.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/44180Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2011/dsa-2217Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.ubuntu.com/usn/USN-1108-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.debian.org/security/2011/dsa-2216Vendor AdvisoryX Refsource DEBIANThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.redhat.com/support/errata/RHSA-2011-0428.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/44089Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2011:0428Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0428.jsonAdvisory
access.redhat.com/security/cve/CVE-2011-0997REPORT
www.cve.org/CVERecord?id=CVE-2011-0997Advisory
nvd.nist.gov/vuln/detail/CVE-2011-0997Advisory
access.redhat.com/errata/RHSA-2011:0840Advisory
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0840.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2011-0997Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities