CVE-2010-2156
CVE-2010-2156
Vexday Risk Score
60Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 76.4%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado
Lifecycle
07 Jun 2010Published on NVD
03 Jul 2010Public PoC
Weaponization speed
25 daysto first PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/14185unverifiedexploitdbwww.exploit-db.com/exploits/14185unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://ftp.isc.org/isc/dhcp/dhcp-4.0.2-P1-RELNOTEShttp://ftp.isc.org/isc/dhcp/dhcp-4.1.1-P1-RELNOTEShttp://lists.fedoraproject.org/pipermail/package-announce/2010-June/042843.htmlhttp://secunia.com/advisories/40116https://exchange.xforce.ibmcloud.com/vulnerabilities/59222http://www.exploit-db.com/exploits/14185http://www.mandriva.com/security/advisories?name=MDVSA-2010:114http://www.securityfocus.com/bid/40775http://www.securitytracker.com/id?1024093