CVE-2012-3955: canonical ubuntu_linux
CVSS: 7.1v2.0HighModified
AliasesRHSA-2013:0504DEBIAN-CVE-2012-3955DSA-2551-1
Published 14-09-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-3955 is a high (CVSS 7.1) vulnerability in canonical ubuntu_linux. EPSS estimates a 21.65% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities.
CVSS score
7.1/10
010
High · v2.0 (NVD)EPSS score
21.65%
0%100%
High · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 14-09-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.1Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
21.65%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 21.65% on 19-09-2026
19-09-202619-10-2026
EPSS score21.65%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat5 products
- dhclient< 12:4.1.1-34.P1.el6
- dhcp< 12:4.1.1-34.P1.el6
- dhcp-common< 12:4.1.1-34.P1.el6
- dhcp-debuginfo< 12:4.1.1-34.P1.el6
- dhcp-devel< 12:4.1.1-34.P1.el6
Debian2 products
- isc-dhcp< 4.2.4-2 | < 4.1.1-P1-15+squeeze8
- debian_linuxEOL6.0 | 7.0
Canonical1 product
- ubuntu_linuxEOL10.04 | 11.04 | 11.10 | 12.04
Isc1 product
- dhcp4.1-esv | 4.1-esv:r1 | 4.1-esv:r2 | 4.1-esv:r3 | 4.1-esv:r3_b1 | 4.1-esv:r4 | 4.1-esv:r5 | 4.1-esv:r5_b1 | 4.1-esv:r5_rc1 | 4.1-esv:r5_rc2 | 4.1-esv:r6 | 4.1-esv:rc1 | 4.1.0 | 4.1.0:a1 | 4.1.0:a2 | 4.1.0:b1 | 4.1.1 | 4.1.1:b1 | 4.1.1:b2 | 4.1.1:b3 | 4.1.1:rc1 | 4.1.2 | 4.1.2:b1 | 4.1.2:p1 | 4.1.2:rc1
4 vendors · 9 products
References
26 links- lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.opensuse.org/opensuse-updates/2012-09/msg00103.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2012-09/msg00088.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2012:153Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
Show all 26 references
- lists.opensuse.org/opensuse-updates/2012-09/msg00105.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
