CVE-2015-8605
N/A
Published: January 14, 2016 at 10:00 PM UTC
Updated: June 17, 2026 at 12:34 AM UTC
4 products affected across 4 vendorsDebian LinuxUbuntu LinuxDHCP
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 83%
Description
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Ubuntu Linux· Canonicalrubygems
95%Debian Linux· Debiandrupal
95%4.0.04.0.14.0.24.0.2 p14.0.34.0.3 rc14.1-esv4.1-esv r14.1-esv r104.1-esv r10_b14.1-esv r11_b14.1-esv r11_rc14.1-esv r11_rc24.1-esv r124.1-esv r12_b14.1-esv r24.1-esv r34.1-esv r3_b14.1-esv r44.1-esv r54.1-esv r5_b14.1-esv r5_rc14.1-esv r5_rc24.1-esv r64.1-esv r74.1-esv r84.1-esv r8_b14.1-esv r8_rc14.1-esv r94.1-esv r9_b14.1-esv r9_rc14.1.04.1.14.1.1 p14.1.24.1.2 b14.1.2 p14.1.2 rc14.2.04.2.0 p14.2.0 p24.2.14.2.1 b14.2.1 p14.2.1 rc14.2.24.2.2 b14.2.2 rc14.2.34.2.3 p14.2.3 p24.2.44.2.4 b14.2.4 p14.2.4 p24.2.4 rc14.2.4 rc24.2.54.2.5 b14.2.5 p14.2.5 rc14.2.64.2.6 b14.2.6 rc14.2.74.2.7 b14.2.7 rc14.2.84.2.8 b14.2.8 rc14.2.8 rc24.3.04.3.0 a14.3.0 b14.3.0 rc14.3.14.3.1 b14.3.1 rc14.3.24.3.2 b14.3.2 rc14.3.2 rc24.3.34.3.3 b1
v ≤ 9.318v ≤ 9.353
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175594.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176031.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00162.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00168.html
- http://www.debian.org/security/2016/dsa-3442
References (12)
Vendor Advisoryx_refsource_FEDORAMailing ListThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175594.htmlVendor Advisoryx_refsource_FEDORAMailing ListThird Party Advisory
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176031.htmlVendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2016-02/msg00162.htmlVendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2016-02/msg00168.htmlVendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
http://www.debian.org/security/2016/dsa-3442x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlVDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/80703VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1034657Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card