CVE-2004-1111 Denial of service in n/a
Remote attackers can cause denial of service by flooding undeliverable DHCP packets, affecting Cisco IOS devices without the 'no service dhcp' command.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-1111?
CVE-2004-1111 is a medium-severity denial of service vulnerability in Cisco Ios, published on 1 Dec 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
Which versions are affected by CVE-2004-1111?
It affects 10 products.
Products include Cisco 7200 Router, Cisco 7300 Router, Cisco 7500 Router, Cisco 7600 Router, Cisco Catalyst 7600, Cisco Ios and 4 more.
How do I fix CVE-2004-1111?
No fix has been published for CVE-2004-1111 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2004-1111 being exploited?
There is no known exploitation of CVE-2004-1111 in the wild and no public exploit code.
Sources
Also known as GHSA-3rrq-mwrq-44vc.