CVE-2012-3571: canonical ubuntu_linux
CVSS: 6.1v2.0MediumModified
AliasesRHSA-2012:1140DEBIAN-CVE-2012-3571
Published 25-07-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-3571 is a medium (CVSS 6.1) vulnerability in canonical ubuntu_linux. EPSS estimates a 12.98% chance of exploitation in the next 30 days, higher than 96.2% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
6.1/10
010
Medium · v2.0 (NVD)EPSS score
12.98%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database
Advisory lineage
Upstream 0 · Downstream 5 · Related 1Timeline
- 25-07-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.1Preferred score · NVD (NIST)
AV:A/AC:L/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
12.98%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 12.98% on 19-09-2026
19-09-202619-10-2026
EPSS score12.98%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundISC DHCP 4.x - Multiple Denial of Service Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat6 products
- dhclient< 12:3.0.5-31.el5_8.1
- dhcp< 12:3.0.5-31.el5_8.1
- dhcp-debuginfo< 12:3.0.5-31.el5_8.1
- dhcp-devel< 12:3.0.5-31.el5_8.1
- libdhcp4client< 12:3.0.5-31.el5_8.1
Debian2 products
- isc-dhcp< 4.2.4-2
- debian_linuxEOL6.0 | 7.0
Canonical1 product
- ubuntu_linuxEOL11.04 | 11.10 | 12.04
Isc1 product
- dhcp4.1.2 | 4.2.0 | 4.2.0:a1 | 4.2.0:a2 | 4.2.0:b1 | 4.2.0:b2 | 4.2.0:p1 | 4.2.0:rc1 | 4.2.1 | 4.2.1:b1 | 4.2.1:rc1 | 4.2.2 | 4.2.2:b1 | 4.2.2:rc1 | 4.2.3 | 4.2.3:p1 | 4.2.3:p2 | 4.2.4 | 4.1-esv | 4.1-esv:r1 | 4.1-esv:r2 | 4.1-esv:r3 | 4.1-esv:r3_b1 | 4.1-esv:r4 | 4.1-esv:r5 | 4.1-esv:r5_b1 | 4.1-esv:r5_rc1 | 4.1-esv:r5_rc2
4 vendors · 10 products
References
22 links- www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRMThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2012:116Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- lists.opensuse.org/opensuse-updates/2012-08/msg00030.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2012:115Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
