CVE-2004-1111

Cisco IOS - Denial of Service via Undeliverable DHCP Packet Queue Overflow

Title source: llm
STIX 2.1

Description

Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5632
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA04-316A.html
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/630104
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18021
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/p-034.shtml

Scores

EPSS 0.0234
EPSS Percentile 81.9%

Details

Status published
Products (17)
cisco/7200_router
cisco/7300_router
cisco/7500_router
cisco/7600_router
cisco/catalyst_7600
cisco/ios 12.2\(14\)sz
cisco/ios 12.2\(18\)ew
cisco/ios 12.2\(18\)ewa
cisco/ios 12.2\(18\)s
cisco/ios 12.2\(18\)se
... and 7 more
Published Jan 10, 2005
Tracked Since Feb 18, 2026