QwikSec

Security Database

CVE

CWE

Training

CVE-2004-1111

Published: Dec 1, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

oval:org.mitre.oval:def:5632

vdb-entry

signature

x_refsource_OVAL

third-party-advisory

x_refsource_CERT

20041110 Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service

vendor-advisory

x_refsource_CISCO

third-party-advisory

x_refsource_CERT-VN

cisco-ios-dhcp-dos(18021)

vdb-entry

x_refsource_XF

third-party-advisory

government-resource

x_refsource_CIAC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.