{"action":"Upgrade isc-dhcp to 4.1.1-P1-16.1 or later.","affected":[{"fixed":"4.1.1-P1-16.1","introduced":"0"}],"component":"isc-dhcp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["4.1.1-P1-16.1"],"id":"tcs_01M5N9QDRQJQNXZAY9BVJJSDWP","modified_at":"2026-10-23T17:47:29.346654479Z","published_at":"2011-04-08T15:17:27.387Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-0997","https://security-tracker.debian.org/tracker/CVE-2011-0997"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-0997#Debian:13/isc-dhcp","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-0997"}],"summary":"dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a h"}