Amazon Linux AMI : dhcp Remote Crash Vulnerability (ALAS-2013-157)

This script is Copyright (C) 2013 Tenable Network Security, Inc.


Synopsis :

The remote Amazon Linux AMI host is missing a security update.

Description :

A flaw was found in the way the dhcpd daemon handled the expiration
time of IPv6 leases. If dhcpd's configuration was changed to reduce
the default IPv6 lease time, lease renewal requests for previously
assigned leases could cause dhcpd to crash. (CVE-2012-3955)

See also :

http://www.nessus.org/u?6a22abab

Solution :

Run 'yum update dhcp' to update your system.

Risk factor :

High / CVSS Base Score : 7.1
(CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C)

Family: Amazon Linux Local Security Checks

Nessus Plugin ID: 69716 ()

Bugtraq ID:

CVE ID: CVE-2012-3955