{"id":"CVE-2015-8605","aliases":["DEBIAN-CVE-2015-8605","DLA-385-1","DLA-385-2","DSA-3442-1","EUVD-2015-8483","GHSA-fpv7-2967-vrc5","MGASA-2016-0028","SUSE-SU-2016:0481-1","SUSE-SU-2016:0540-1","SUSE-SU-2016:0541-1","UBUNTU-CVE-2015-8605","USN-2868-1","openSUSE-SU-2024:10358-1"],"status":"published","title":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to...","description":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.82728,"percentile":0.99671,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2016-01-12T00:00:00Z","modified":"2026-09-09T07:01:56Z","fixes":[{"ecosystem":"Debian:12","package":"isc-dhcp","fixed_in":["4.3.3-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"isc-dhcp","fixed_in":["4.3.3-7"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"isc-dhcp","fixed_in":["4.1.1-P1-15+squeeze9","4.1.1-P1-15+squeeze10"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"isc-dhcp","fixed_in":["4.2.2.dfsg.1-5+deb70u8"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"isc-dhcp","fixed_in":["4.3.1-6+deb8u2"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"dhcp","fixed_in":["4.3.3P1-1.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"dhcp","fixed_in":["4.2.4.P2-0.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"dhcp","fixed_in":["4.2.6-14.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"dhcp","fixed_in":["4.2.6-14.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"dhcp","fixed_in":["4.2.6-14.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"dhcp","fixed_in":["4.2.6-14.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"dhcp","fixed_in":["4.3.3-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"dhcp","fixed_in":["4.3.3-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"dhcp","fixed_in":["4.3.3-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dhcp","fixed_in":["4.3.3-4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"isc-dhcp","fixed_in":["4.2.4-7ubuntu12.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-7"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-7"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-P1-15+squeeze9"}]}],"versions":["4.1.1-P1-15","4.1.1-P1-15+squeeze1","4.1.1-P1-15+squeeze2","4.1.1-P1-15+squeeze3","4.1.1-P1-15+squeeze4","4.1.1-P1-15+squeeze5","4.1.1-P1-15+squeeze6","4.1.1-P1-15+squeeze8"]},{"source":"osv","ecosystem":"Debian:6.0","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-P1-15+squeeze10"}]}],"versions":["4.1.1-P1-15","4.1.1-P1-15+squeeze1","4.1.1-P1-15+squeeze2","4.1.1-P1-15+squeeze3","4.1.1-P1-15+squeeze4","4.1.1-P1-15+squeeze5","4.1.1-P1-15+squeeze6","4.1.1-P1-15+squeeze8","4.1.1-P1-15+squeeze9"]},{"source":"osv","ecosystem":"Debian:7","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2.dfsg.1-5+deb70u8"}]}],"versions":["4.2.2.dfsg.1-5+deb70u3","4.2.2.dfsg.1-5+deb70u4","4.2.2.dfsg.1-5+deb70u5","4.2.2.dfsg.1-5+deb70u6","4.2.2.dfsg.1-5+deb70u7"]},{"source":"osv","ecosystem":"Debian:8","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-6+deb8u2"}]}],"versions":["4.3.1-6","4.3.1-6+deb8u1"]},{"source":"osv","ecosystem":"Mageia:5","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3P1-1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6-14.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6-14.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6-14.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6-14.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-4.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-7ubuntu12.4"}]}],"versions":["4.2.4-7ubuntu8","4.2.4-7ubuntu9","4.2.4-7ubuntu10","4.2.4-7ubuntu11","4.2.4-7ubuntu12","4.2.4-7ubuntu12.1","4.2.4-7ubuntu12.2","4.2.4-7ubuntu12.3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-7ubuntu12.4"}]}],"versions":["4.2.4-7ubuntu8","4.2.4-7ubuntu9","4.2.4-7ubuntu10","4.2.4-7ubuntu11","4.2.4-7ubuntu12","4.2.4-7ubuntu12.1","4.2.4-7ubuntu12.2","4.2.4-7ubuntu12.3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3.P1-3.1"}]}],"bundled":16}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"isc","product":"dhcp"},{"vendor":"sophos","product":"unified_threat_management_up2date"}],"references":[{"url":"http://www.securitytracker.com/id/1034657","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00168.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://kb.isc.org/article/AA-01334","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175594.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.debian.org/security/2016/dsa-3442","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2868-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176031.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/80703","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00162.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8605"},{"url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released"},{"url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released"},{"url":"https://github.com/advisories/GHSA-fpv7-2967-vrc5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8605","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0028.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17490","tags":["report"]},{"url":"https://kb.isc.org/article/AA-01329","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17177","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160481-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/880984","tags":["report"]},{"url":"https://bugzilla.suse.com/919959","tags":["report"]},{"url":"https://bugzilla.suse.com/926159","tags":["report"]},{"url":"https://bugzilla.suse.com/928390","tags":["report"]},{"url":"https://bugzilla.suse.com/936923","tags":["report"]},{"url":"https://bugzilla.suse.com/947780","tags":["report"]},{"url":"https://bugzilla.suse.com/961305","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8605","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160540-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/891961","tags":["report"]},{"url":"https://bugzilla.suse.com/910686","tags":["report"]},{"url":"https://bugzilla.suse.com/912098","tags":["report"]},{"url":"https://bugzilla.suse.com/956159","tags":["report"]},{"url":"https://bugzilla.suse.com/960506","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160541-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-8605","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2868-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8605","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2266","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-8605","description":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.","status":"published","published":"2016-01-14T22:00:00Z","modified":"2024-08-06T08:20:43.591Z","updated_at":"2026-11-02T14:35:40.900357Z"}],"euvd":[{"id":"EUVD-2015-8483","description":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.","status":"published","published":"2016-01-14T22:00:00Z","modified":"2024-08-06T08:20:43Z","updated_at":"2026-11-03T01:57:26.810911Z"}],"ghsa":[{"id":"GHSA-fpv7-2967-vrc5","title":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to...","description":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.","status":"published","published":"2022-05-13T01:27:29Z","modified":"2025-04-12T12:55:51Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:25.259545Z"}],"nvd":[{"id":"CVE-2015-8605","description":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.","status":"published","published":"2016-01-14T22:59:00.077Z","modified":"2026-06-17T00:34:50.327Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":5.7,"vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:15.746629Z"}],"osv":[{"id":"CVE-2015-8605","description":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.","status":"published","published":"2016-01-14T22:59:00Z","modified":"2026-04-16T06:15:20.133223758Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-8605","description":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.","status":"published","published":"2016-01-14T22:59:00.077Z","modified":"2026-09-09T07:01:56.650837243Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"UBUNTU-CVE-2015-8605","description":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.","status":"published","published":"2016-01-12T00:00:00Z","modified":"2026-04-22T10:22:09.128431Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:10.737723Z"},{"id":"DLA-385-1","title":"isc-dhcp - security update","status":"published","published":"2016-01-14T00:00:00Z","modified":"2026-03-09T01:20:18.797765Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-385-2","title":"isc-dhcp - regression update","status":"published","published":"2016-01-19T00:00:00Z","modified":"2026-03-09T01:22:00.031364Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-3442-1","title":"isc-dhcp - security update","status":"published","published":"2016-01-13T00:00:00Z","modified":"2026-03-09T01:19:31.449097Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0028","title":"Updated dhcp packages fix security vulnerability","description":"A badly formed packet with an invalid IPv4 UDP length field can cause an\nISC DHCP server, client, or relay program to terminate abnormally\n(CVE-2015-8605).\n\nThe dhcp package has been updated to version 4.3.3-P1, which fixes this\nissue and several other bugs.\n\nAlso, the package has also been enhanced to provide better support for\nrunning a DHCPv6 server (mga#17177).\n","status":"published","published":"2016-01-20T17:53:26Z","modified":"2026-04-16T06:23:29.683398623Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10358-1","title":"dhcp-4.3.3.P1-3.1 on GA media","description":"These are all security issues fixed in the dhcp-4.3.3.P1-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:31.811732Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2016:0481-1","title":"Security update for dhcp","description":"\nThis update for dhcp fixes the following issues:\n\n- CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally (bsc#961305)\n\nThe following bugs were fixed:\n\n- bsc#936923: Improper lease duration checking\n- bsc#880984: Integer overflows in the date and time handling code\n- bsc#947780: DHCP server could abort with 'Unable to set up timer: out of range' on very long or infinite timer intervals / lease lifetimes \n- bsc#926159: DHCP preferrend and valid lifetime would be logged incorrectly\n- bsc#928390: dhclient dit not expose next-server DHCPv4 option to script\n- bsc#926159: DHCP preferrend and valid lifetime would be logged incorrectly\n","status":"published","published":"2016-02-16T17:34:05Z","modified":"2026-02-04T02:32:11.996147Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0540-1","title":"Security update for dhcp","description":"\nThis update for dhcp fixes the following issues:\n\n- CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally (bsc#961305)\n\nThe following bugs were fixed:\n\n- bsc#936923: Improper lease duration checking\n- bsc#880984: Integer overflows in the date and time handling code\n- bsc#956159: fixed service files to start dhcpd after slapd\n- bsc#960506: Improve exit reason and logging when /sbin/dhclient-script is unable to pre-init requested interface\n- bsc#947780: DHCP server could abort with 'Unable to set up timer: out of range' on very long or infinite timer intervals / lease lifetimes \n- bsc#912098: dhclient could pretend to run while silently declining leases\n- bsc#919959: server: Do not log success report before send reported success\n- bsc#928390: dhclient dit not expose next-server DHCPv4 option to script\n- bsc#926159: DHCP preferrend and valid lifetime would be logged incorrectly\n- bsc#910686: Prevent a dependency conflict of dhcp-devel with bind-devel package\n\nThe following tracked changes affect the build of the package only:\n\n- bsc#891961: Disabled /sbin/service legacy-action hooks\n","status":"published","published":"2016-02-22T13:35:56Z","modified":"2026-02-04T02:26:58.986346Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0541-1","title":"Security update for dhcp","description":"\nThis update for dhcp fixes the following issues:\n\n- CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally (bsc#961305)\n\nThe following bugs were fixed:\n\n- bsc#936923: Improper lease duration checking\n- bsc#880984: Integer overflows in the date and time handling code\n- bsc#956159: fixed service files to start dhcpd after slapd\n- bsc#960506: Improve exit reason and logging when /sbin/dhclient-script is unable to pre-init requested interface\n","status":"published","published":"2016-02-22T13:36:16Z","modified":"2025-05-02T04:04:51.182343Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"USN-2868-1","title":"isc-dhcp vulnerability","description":"Sebastian Poehn discovered that the DHCP server, client, and relay\nincorrectly handled certain malformed UDP packets. A remote attacker could\nuse this issue to cause the DHCP server, client, or relay to stop\nresponding, resulting in a denial of service.\n","status":"published","published":"2016-01-13T12:36:52Z","modified":"2026-04-22T09:20:25.935877Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}