CVE-2015-8605 ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
MediumCVSS 6.5
EPSS 82.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/isc-dhcp(Debian:12) | < 4.3.3-7 | 4.3.3-7 |
| debian/isc-dhcp(Debian:13) | < 4.3.3-7 | 4.3.3-7 |
| sophos unified threat management up2date | <= 9.318 | No fix listed |
| sophos unified threat management up2date | <= 9.353 | No fix listed |
| isc dhcp | = 4.0.0 | No fix listed |
| isc dhcp | = 4.0.1 | No fix listed |
| isc dhcp | = 4.0.2 | No fix listed |
| isc dhcp | = 4.0.2-p1 | No fix listed |
| isc dhcp | = 4.0.3 | No fix listed |
| isc dhcp | = 4.0.3-rc1 | No fix listed |
| isc dhcp | = 4.1-esv | No fix listed |
| isc dhcp | = 4.1-esv-r1 | No fix listed |
| isc dhcp | = 4.1-esv-r10 | No fix listed |
| isc dhcp | = 4.1-esv-r10_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r11_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r11_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r11_rc2 | No fix listed |
| isc dhcp | = 4.1-esv-r12 | No fix listed |
| isc dhcp | = 4.1-esv-r12_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r2 | No fix listed |
| isc dhcp | = 4.1-esv-r3 | No fix listed |
| isc dhcp | = 4.1-esv-r3_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r4 | No fix listed |
| isc dhcp | = 4.1-esv-r5 | No fix listed |
| isc dhcp | = 4.1-esv-r5_b1 | No fix listed |
Show 70 more
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 4.1-esv-r5_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc2 | No fix listed |
| isc dhcp | = 4.1-esv-r6 | No fix listed |
| isc dhcp | = 4.1-esv-r7 | No fix listed |
| isc dhcp | = 4.1-esv-r8 | No fix listed |
| isc dhcp | = 4.1-esv-r8_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r8_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r9 | No fix listed |
| isc dhcp | = 4.1-esv-r9_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r9_rc1 | No fix listed |
| isc dhcp | = 4.1.0 | No fix listed |
| isc dhcp | = 4.1.1 | No fix listed |
| isc dhcp | = 4.1.1-p1 | No fix listed |
| isc dhcp | = 4.1.2 | No fix listed |
| isc dhcp | = 4.1.2-b1 | No fix listed |
| isc dhcp | = 4.1.2-p1 | No fix listed |
| isc dhcp | = 4.1.2-rc1 | No fix listed |
| isc dhcp | = 4.2.0 | No fix listed |
| isc dhcp | = 4.2.0-p1 | No fix listed |
| isc dhcp | = 4.2.0-p2 | No fix listed |
| isc dhcp | = 4.2.1 | No fix listed |
| isc dhcp | = 4.2.1-b1 | No fix listed |
| isc dhcp | = 4.2.1-p1 | No fix listed |
| isc dhcp | = 4.2.1-rc1 | No fix listed |
| isc dhcp | = 4.2.2 | No fix listed |
| isc dhcp | = 4.2.2-b1 | No fix listed |
| isc dhcp | = 4.2.2-rc1 | No fix listed |
| isc dhcp | = 4.2.3 | No fix listed |
| isc dhcp | = 4.2.3-p1 | No fix listed |
| isc dhcp | = 4.2.3-p2 | No fix listed |
| isc dhcp | = 4.2.4 | No fix listed |
| isc dhcp | = 4.2.4-b1 | No fix listed |
| isc dhcp | = 4.2.4-p1 | No fix listed |
| isc dhcp | = 4.2.4-p2 | No fix listed |
| isc dhcp | = 4.2.4-rc1 | No fix listed |
| isc dhcp | = 4.2.4-rc2 | No fix listed |
| isc dhcp | = 4.2.5 | No fix listed |
| isc dhcp | = 4.2.5-b1 | No fix listed |
| isc dhcp | = 4.2.5-p1 | No fix listed |
| isc dhcp | = 4.2.5-rc1 | No fix listed |
| isc dhcp | = 4.2.6 | No fix listed |
| isc dhcp | = 4.2.6-b1 | No fix listed |
| isc dhcp | = 4.2.6-rc1 | No fix listed |
| isc dhcp | = 4.2.7 | No fix listed |
| isc dhcp | = 4.2.7-b1 | No fix listed |
| isc dhcp | = 4.2.7-rc1 | No fix listed |
| isc dhcp | = 4.2.8 | No fix listed |
| isc dhcp | = 4.2.8-b1 | No fix listed |
| isc dhcp | = 4.2.8-rc1 | No fix listed |
| isc dhcp | = 4.2.8-rc2 | No fix listed |
| isc dhcp | = 4.3.0 | No fix listed |
| isc dhcp | = 4.3.0-a1 | No fix listed |
| isc dhcp | = 4.3.0-b1 | No fix listed |
| isc dhcp | = 4.3.0-rc1 | No fix listed |
| isc dhcp | = 4.3.1 | No fix listed |
| isc dhcp | = 4.3.1-b1 | No fix listed |
| isc dhcp | = 4.3.1-rc1 | No fix listed |
| isc dhcp | = 4.3.2 | No fix listed |
| isc dhcp | = 4.3.2-b1 | No fix listed |
| isc dhcp | = 4.3.2-rc1 | No fix listed |
| isc dhcp | = 4.3.2-rc2 | No fix listed |
| isc dhcp | = 4.3.3 | No fix listed |
| isc dhcp | = 4.3.3-b1 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
References
- Debian Security Tracker CVE-2015-8605 vendor-advisory
- FEDORA-2016-0c5bb21bf1 mailing-list third-party-advisory vendor-advisory
- FEDORA-2016-adb533a418 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0601 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0610 mailing-list third-party-advisory vendor-advisory
- DSA-3442 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- 80703 third-party-advisory vdb-entry
- 1034657 third-party-advisory vdb-entry
- USN-2868-1 third-party-advisory vendor-advisory
- blogs.sophos.com third-party-advisory
- blogs.sophos.com third-party-advisory
- kb.isc.org vendor-advisory
- bugs.debian.org issue-tracking