CVE-2015-8605: Input Validation
Published Jan 14, 2016
·Updated
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Affected Software
93 affected components
Sophos Unified Threat Management Up2date<=9.318
Sophos Unified Threat Management Up2date<=9.353
ISC DHCP=4.0.0
ISC DHCP=4.0.1
ISC DHCP=4.0.2
ISC DHCP=4.0.2-p1
ISC DHCP=4.0.3
ISC DHCP=4.0.3-rc1
ISC DHCP=4.1-esv
ISC DHCP=4.1-esv-r1
ISC DHCP=4.1-esv-r10
ISC DHCP=4.1-esv-r10_b1
ISC DHCP=4.1-esv-r11_b1
ISC DHCP=4.1-esv-r11_rc1
ISC DHCP=4.1-esv-r11_rc2
ISC DHCP=4.1-esv-r12
ISC DHCP=4.1-esv-r12_b1
ISC DHCP=4.1-esv-r2
ISC DHCP=4.1-esv-r3
ISC DHCP=4.1-esv-r3_b1
ISC DHCP=4.1-esv-r4
ISC DHCP=4.1-esv-r5
ISC DHCP=4.1-esv-r5_b1
ISC DHCP=4.1-esv-r5_rc1
ISC DHCP=4.1-esv-r5_rc2
ISC DHCP=4.1-esv-r6
ISC DHCP=4.1-esv-r7
ISC DHCP=4.1-esv-r8
ISC DHCP=4.1-esv-r8_b1
ISC DHCP=4.1-esv-r8_rc1
ISC DHCP=4.1-esv-r9
ISC DHCP=4.1-esv-r9_b1
ISC DHCP=4.1-esv-r9_rc1
ISC DHCP=4.1.0
ISC DHCP=4.1.1
ISC DHCP=4.1.1-p1
ISC DHCP=4.1.2
ISC DHCP=4.1.2-b1
ISC DHCP=4.1.2-p1
ISC DHCP=4.1.2-rc1
ISC DHCP=4.2.0
ISC DHCP=4.2.0-p1
ISC DHCP=4.2.0-p2
ISC DHCP=4.2.1
ISC DHCP=4.2.1-b1
ISC DHCP=4.2.1-p1
ISC DHCP=4.2.1-rc1
ISC DHCP=4.2.2
ISC DHCP=4.2.2-b1
ISC DHCP=4.2.2-rc1
ISC DHCP=4.2.3
ISC DHCP=4.2.3-p1
ISC DHCP=4.2.3-p2
ISC DHCP=4.2.4
ISC DHCP=4.2.4-b1
ISC DHCP=4.2.4-p1
ISC DHCP=4.2.4-p2
ISC DHCP=4.2.4-rc1
ISC DHCP=4.2.4-rc2
ISC DHCP=4.2.5
ISC DHCP=4.2.5-b1
ISC DHCP=4.2.5-p1
ISC DHCP=4.2.5-rc1
ISC DHCP=4.2.6
ISC DHCP=4.2.6-b1
ISC DHCP=4.2.6-rc1
ISC DHCP=4.2.7
ISC DHCP=4.2.7-b1
ISC DHCP=4.2.7-rc1
ISC DHCP=4.2.8
ISC DHCP=4.2.8-b1
ISC DHCP=4.2.8-rc1
ISC DHCP=4.2.8-rc2
ISC DHCP=4.3.0
ISC DHCP=4.3.0-a1
ISC DHCP=4.3.0-b1
ISC DHCP=4.3.0-rc1
ISC DHCP=4.3.1
ISC DHCP=4.3.1-b1
ISC DHCP=4.3.1-rc1
ISC DHCP=4.3.2
ISC DHCP=4.3.2-b1
ISC DHCP=4.3.2-rc1
ISC DHCP=4.3.2-rc2
ISC DHCP=4.3.3
ISC DHCP=4.3.3-b1
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.04
Canonical Ubuntu Linux=15.10
Event History
Jan 14, 2016
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8605?
CVE-2015-8605 has a severity rating that indicates it can lead to a denial of service through application crashes.
2
How do I fix CVE-2015-8605?
To fix CVE-2015-8605, upgrade to ISC DHCP versions 4.1-ESV-R12-P1, 4.3.3-P1 or later.
3
What types of systems are affected by CVE-2015-8605?
CVE-2015-8605 affects several versions of ISC DHCP Server and Sophos Unified Threat Management software.
4
How does CVE-2015-8605 exploit the system?
CVE-2015-8605 exploits the system by sending an invalid length field in a UDP IPv4 packet to trigger application crashes.
5
What potential impact does CVE-2015-8605 have on network services?
CVE-2015-8605 may lead to network service disruptions, affecting stability and availability due to crashes.