CVE-2015-8605
Description
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Risk Information
Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
45.998
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| DHCP server and client (USN-2868-1) isc-dhcp-relay_4.3.1-5ubuntu2.3_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-relay_4.3.1-5ubuntu2.3_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-relay_4.3.1-5ubuntu3_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-relay_4.3.1-5ubuntu3_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-relay_4.1.ESV-R4-0ubuntu5.10_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-relay_4.1.ESV-R4-0ubuntu5.10_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-client_4.3.1-5ubuntu2.3_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-client_4.3.1-5ubuntu2.3_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-client_4.3.1-5ubuntu3_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-client_4.3.1-5ubuntu3_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-client_4.1.ESV-R4-0ubuntu5.10_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-client_4.1.ESV-R4-0ubuntu5.10_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server_4.3.1-5ubuntu2.3_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server_4.3.1-5ubuntu2.3_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server_4.3.1-5ubuntu3_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server_4.3.1-5ubuntu3_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server_4.1.ESV-R4-0ubuntu5.10_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server_4.1.ESV-R4-0ubuntu5.10_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server-ldap_4.3.1-5ubuntu2.3_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server-ldap_4.3.1-5ubuntu2.3_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server-ldap_4.3.1-5ubuntu3_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server-ldap_4.3.1-5ubuntu3_amd64.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server-ldap_4.1.ESV-R4-0ubuntu5.10_i386.deb | Linux |
| DHCP server and client (USN-2868-1) isc-dhcp-server-ldap_4.1.ESV-R4-0ubuntu5.10_amd64.deb | Linux |
| SUSE-SU-2016:0481-1(SUSE Linux Enterprise Desktop 11-SP3 ) dhcp-4.2.4.P2-0.24.1.x86_64.rpm | Linux |
| SUSE-SU-2016:0481-1(SUSE Linux Enterprise Desktop 11-SP3 ) dhcp-client-4.2.4.P2-0.24.1.x86_64.rpm | Linux |
| SUSE-SU-2016:0481-1(SUSE Linux Enterprise Server 11-SP3 ) dhcp-relay-4.2.4.P2-0.24.1.x86_64.rpm | Linux |
| SUSE-SU-2016:0481-1(SUSE Linux Enterprise Server 11-SP3 ) dhcp-server-4.2.4.P2-0.24.1.x86_64.rpm | Linux |
| Vulnerabilities CVE-2015-8605 ,CVE-2021-36807 are affected in unified_threat_management_up2date 9.318 | NCM |
| Vulnerabilities CVE-2015-8605 ,CVE-2021-36807 are affected in unified_threat_management_up2date 9.353 | NCM |
| Improper Input Validation Vulnerability (CVE-2015-8605) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234