CVEvulnerability

CVE-2017-3144

7.5 HIGH Published 2019-01-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-01-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-400

Description

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

Affected configurations

• isc dhcp (>= 4.2.0 <= 4.2.8) • isc dhcp (>= 4.3.0 <= 4.3.6) • isc dhcp 4.1-esv • isc dhcp 4.1.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 7.4 • redhat enterprise linux server aus 7.6 • redhat enterprise linux server eus 7.4 • redhat enterprise linux server eus 7.5 • redhat enterprise linux server eus 7.6 • redhat enterprise linux server tus 7.4 • redhat enterprise linux server tus 7.6 • redhat enterprise linux workstation 7.0 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 17.10 • debian debian linux 8.0 • debian debian linux 9.0

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References