CVEvulnerability

CVE-2004-1111

5.0 MEDIUM Published 2005-01-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.

Affected configurations

• cisco ios 12.2\(14\)sz • cisco ios 12.2\(18\)ew • cisco ios 12.2\(18\)ewa • cisco ios 12.2\(18\)s • cisco ios 12.2\(18\)se • cisco ios 12.2\(18\)sv • cisco ios 12.2\(18\)sw • cisco ios 12.2\(20\)ew • cisco multiservice platform 2650 • cisco multiservice platform 2650xm • cisco multiservice platform 2651 • cisco multiservice platform 2651xm • cisco 7200 router • cisco 7300 router • cisco 7500 router • cisco 7600 router • cisco catalyst 7600

References