topic ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability in General Topics

ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability

jdprovine — Mon, 12 Nov 2018 19:26:36 GMT

Can a vulnerability quit showing up in the threat logs but still be there or a issues?

for instance this

Name: ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability

Unique Threat ID: 35223

Re: ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability

BPry — Mon, 12 Nov 2018 21:33:56 GMT

@jdprovine,

If a vulnerability takes any action it is logged to the Threat logs, if you aren't seeing anything in your logs then it either isn't being identified or has been excluded from the attached profile through an exception or specificly set to an action of 'Allow'.

Re: ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability

jdprovine — Mon, 12 Nov 2018 21:37:14 GMT

@BPry

I was grasping at straws cause I can't see any other reason why DHCP traffic in one zone is getting dropped. We used to have the DHCP relays setup for the interface for that zone and now we are serving the DHCP for that zone directly from the PA until we can find out what the real issues is