CVE-2004-1111
Cisco IOS - Denial of Service via Undeliverable DHCP Packet Queue Overflow
Title source: llmDescription
Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5632
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA04-316A.html
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/630104
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18021
Third Party Advisory, US Government Resource third-party-advisory
government-resource
x_refsource_ciac
http://www.ciac.org/ciac/bulletins/p-034.shtml
Scores
EPSS
0.0234
EPSS Percentile
81.9%
Details
Status
published
Products (17)
cisco/7200_router
cisco/7300_router
cisco/7500_router
cisco/7600_router
cisco/catalyst_7600
cisco/ios
12.2\(14\)sz
cisco/ios
12.2\(18\)ew
cisco/ios
12.2\(18\)ewa
cisco/ios
12.2\(18\)s
cisco/ios
12.2\(18\)se
... and 7 more
Published
Jan 10, 2005
Tracked Since
Feb 18, 2026