CVE-2011-0413

Name	CVE-2011-0413
Description	The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-2184-1
Debian Bugs	611217

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
isc-dhcp (PTS)	bullseye	4.4.1-2.3+deb11u2	fixed
	bullseye (security)	4.4.1-2.3+deb11u1	fixed
	bookworm	4.4.3-P1-2	fixed
	forky, sid, trixie	4.4.3-P1-8	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
dhcp	source	(unstable)	(not affected)
dhcp3	source	(unstable)	(not affected)
isc-dhcp	source	squeeze	4.1.1-P1-15+squeeze1	DSA-2184-1
isc-dhcp	source	(unstable)	4.1.1-P1-16		611217

Notes

- dhcp3 <not-affected> (vuln code introduced in 4.0)
- dhcp <not-affected> (vuln code introduced in 4.0)
maintainer is aware
http://www.isc.org/software/dhcp/advisories/cve-2011-0413