CVE-2010-2156

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 76%

from disclosure to weapon26 days

Published on NVDJun 7

1st PoC+26d

exploitation probability

76%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗

Not affected

1 product (5 components) — because the vulnerable code is not present in the product

Red Hat Enterprise Linux 6

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/14185unverified cve_referencewww.exploit-db.com/exploits/14185unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://ftp.isc.org/isc/dhcp/dhcp-4.0.2-P1-RELNOTES http://ftp.isc.org/isc/dhcp/dhcp-4.1.1-P1-RELNOTES http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042843.html http://secunia.com/advisories/40116 https://exchange.xforce.ibmcloud.com/vulnerabilities/59222 http://www.exploit-db.com/exploits/14185 http://www.mandriva.com/security/advisories?name=MDVSA-2010:114 http://www.securityfocus.com/bid/40775 http://www.securitytracker.com/id?1024093