CVE-2015-8605
MediumISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Published Jan 14, 2016 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2015-8605, DLA-385-1, DLA-385-2, DSA-3442-1, SUSE-SU-2016:0481-1, SUSE-SU-2016:0540-1, SUSE-SU-2016:0541-1, UBUNTU-CVE-2015-8605, USN-2868-1
Key Facts
Patch immediately- CVE-2015-8605 is a medium-severity vulnerability (CVSS 6.5 v3.1) affecting Dhcp (Isc), Unified Threat Management Up2date (Sophos), Ubuntu Linux (Canonical) and 14 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 83% probability of exploitation in the next 30 days.
- Fixed versions are available, including dhclient 12:4.1.1-43.P1.22.amzn1, Dhcp 12:4.1.1-43.P1.22.amzn1, Dhcp 4.2.4.P2-0.24.1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
6.5
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS (30-day exploit likelihood)
83%
Higher than 99.6% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2015-8605 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Affected Products
194 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| DhcpIsc | 4.0.0, 4.0.1, 4.0.2, 4.0.2-p1, 4.0.3, 4.0.3-rc1, 4.1.0, 4.1.1 | 12:4.1.1-43.P1.22.amzn1 |
| Unified Threat Management Up2dateSophos | See advisory | 9.318 |
| Ubuntu LinuxCanonical | 12.04, 14.04, 15.04, 15.10 | n/a |
| Debian LinuxDebian | 7.0, 8.0, 9.0 | n/a |
| isc-dhcpdebian | See advisory | 4.3.3-7 |
Patched Releases
dhclient
12:4.1.1-43.P1.22.amzn1
Dhcp
12:4.1.1-43.P1.22.amzn1, 4.2.4.P2-0.24.1, 4.2.6-14.3.1, 4.2.6-9.16.1, 4.3.3-4.1, 4.3.3.P1-3.1
dhcp-client
4.2.4.P2-0.24.1, 4.2.6-14.3.1, 4.2.6-9.16.1, 4.3.3-4.1, 4.3.3.P1-3.1
dhcp-client-debuginfo
4.2.6-9.16.1
dhcp-common
12:4.1.1-43.P1.22.amzn1
dhcp-debuginfo
4.2.6-9.16.1
dhcp-debugsource
4.2.6-9.16.1
dhcp-devel
12:4.1.1-43.P1.22.amzn1, 4.2.4.P2-0.24.1, 4.2.6-14.3.1, 4.2.6-9.16.1, 4.3.3-4.1, 4.3.3.P1-3.1
dhcp-doc
4.2.6-9.16.1, 4.3.3-4.1, 4.3.3.P1-3.1
dhcp-relay
4.2.4.P2-0.24.1, 4.2.6-14.3.1, 4.2.6-9.16.1, 4.3.3-4.1, 4.3.3.P1-3.1
dhcp-relay-debuginfo
4.2.6-9.16.1
dhcp-server
4.2.4.P2-0.24.1, 4.2.6-14.3.1, 4.2.6-9.16.1, 4.3.3-4.1, 4.3.3.P1-3.1
dhcp-server-debuginfo
4.2.6-9.16.1
isc-dhcp
4.1.1-P1-15+squeeze10, 4.1.1-P1-15+squeeze9, 4.2.2.dfsg.1-5+deb70u8, 4.2.4-7ubuntu12.4, 4.3.1-6+deb8u2, 4.3.3-7
Unified Threat Management Up2date
9.318
Timeline
Publicly disclosed
Jan 14, 2016
Last updated
Aug 4, 2026
Weakness Type
- CWE-20 Improper Input Validation
- CWE-125 Out-of-bounds Read
- CWE-190 Integer Overflow or Wraparound
References
- advisoryFEDORA-2016-0c5bb21bf1
- advisoryFEDORA-2016-adb533a418
- advisoryopenSUSE-SU-2016:0601
- advisoryopenSUSE-SU-2016:0610
- advisoryhttps://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/
FAQ
Common Questions.
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Affected: Dhcp (Isc) versions 4.0.0, 4.0.1, 4.0.2, 4.0.2-p1, 4.0.3, 4.0.3-rc1, 4.1.0, 4.1.1; Unified Threat Management Up2date (Sophos); Ubuntu Linux (Canonical) versions 12.04, 14.04, 15.04, 15.10, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including dhclient 12:4.1.1-43.P1.22.amzn1, Dhcp 12:4.1.1-43.P1.22.amzn1, Dhcp 4.2.4.P2-0.24.1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2015-8605 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo