Published: 14/01/2016 Updated: 01/04/2020

CVSS v2 Base Score: 5.7 | Impact Score: 6.9 | Exploitability Score: 5.5

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 507

Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C

Subscribe to Unified Threat Management Up2date

ISC DHCP 4.x prior to 4.1-ESV-R12-P1, 4.2.x, and 4.3.x prior to 4.3.3-P1 allows remote malicious users to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sophos unified threat management up2date
isc dhcp 4.0.0
isc dhcp 4.0.1
isc dhcp 4.0.2
isc dhcp 4.0.3
isc dhcp 4.1-esv
isc dhcp 4.1.0
isc dhcp 4.1.1
isc dhcp 4.1.2
isc dhcp 4.2.0
isc dhcp 4.2.1
isc dhcp 4.2.2
isc dhcp 4.2.3
isc dhcp 4.2.4
isc dhcp 4.2.5
isc dhcp 4.2.6
isc dhcp 4.2.7
isc dhcp 4.2.8
isc dhcp 4.3.0
isc dhcp 4.3.1
isc dhcp 4.3.2
isc dhcp 4.3.3
debian debian linux 7.0
debian debian linux 8.0
debian debian linux 9.0
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
canonical ubuntu linux 15.04
canonical ubuntu linux 15.10

Debian Bug report logs - #810875 isc-dhcp: CVE-2015-8605: UDP payload length not properly checked Package: src:isc-dhcp; Maintainer for src:isc-dhcp is Debian ISC DHCP Maintainers <isc-dhcp@packagesdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 13 Jan 2016 05:51:05 UTC Severity: grave ...

DHCP server, client, or relay could be made to crash if they received specially crafted network traffic ...

ISC DHCP 4x before 41-ESV-R12-P1 and 42x and 43x before 433-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet ...

ISC DHCP 4x before 41-ESV-R12-P1, 42x, and 43x before 433-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet ...

CWE-20 https://kb.isc.org/article/AA-01334 https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html http://www.securityfocus.com/bid/80703 http://lists.opensuse.org/opensuse-updates/2016-02/msg00168.html http://lists.opensuse.org/opensuse-updates/2016-02/msg00162.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175594.html http://www.ubuntu.com/usn/USN-2868-1 http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176031.html http://www.debian.org/security/2016/dsa-3442 http://www.securitytracker.com/id/1034657 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=810875 https://usn.ubuntu.com/2868-1/https://nvd.nist.gov

CVE-2015-8605

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect