Two vulnerabilities have been reported in ISC DHCP, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An unspecified error when processing a certain packet can be exploited to cause the server to halt by sending specially crafted packets.

2) Another unspecified error when processing a certain packet can be exploited to cause the server to halt by sending specially crafted packets.

The vulnerabilities are reported in versions 3.1.0 through 3.1-ESV-R1, 4.1.0 through 4.1.2rc1, 4.1-ESV through 4.1-ESV-R3b1, and 4.2.0 through 4.2.2rc1.

Solution
Update to version 3.1-ESV-R3, 4.1-ESV-R3, or 4.2.2.

Provided and/or discovered by
1) The vendor credits David Zych, University of Illinois.
2) Reported by the vendor.

Original Advisory
https://www.isc.org/software/dhcp/advisories/cve-2011-2748

Deep Links
Links available to Secunia VIM customers