CVE-2010-2156

CVE-2010-2156 describes a denial-of-service vulnerability affecting ISC DHCP versions 4.1 prior to 4.1.1-P1 and 4.0 prior to 4.0.2-P1. A remote attacker can exploit this flaw by sending a DHCP request with a zero-length client ID, causing the DHCP server to exit. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and is easily exploitable over the network with low attack complexity, leading to a complete loss of availability. While not listed on the KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, and there is some community discussion surrounding the CVE.