CVE-2017-3144 Failure to properly clean up closed OMAPI connections can exhaust available sockets
HighCVSS 7.5
EPSS 72.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/isc-dhcp(Debian:12) | < 4.3.5-3.1 | 4.3.5-3.1 |
| debian/isc-dhcp(Debian:13) | < 4.3.5-3.1 | 4.3.5-3.1 |
| isc dhcp | >= 4.2.0, <= 4.2.8 | No fix listed |
| isc dhcp | >= 4.3.0, <= 4.3.6 | No fix listed |
| isc dhcp | = 4.1-esv | No fix listed |
| isc dhcp | = 4.1-esv-r1 | No fix listed |
| isc dhcp | = 4.1-esv-r10 | No fix listed |
| isc dhcp | = 4.1-esv-r10_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r10_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r11 | No fix listed |
| isc dhcp | = 4.1-esv-r11_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r11_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r11_rc2 | No fix listed |
| isc dhcp | = 4.1-esv-r12 | No fix listed |
| isc dhcp | = 4.1-esv-r12_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r12_p1 | No fix listed |
| isc dhcp | = 4.1-esv-r13 | No fix listed |
| isc dhcp | = 4.1-esv-r13_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r14 | No fix listed |
| isc dhcp | = 4.1-esv-r14_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r15 | No fix listed |
| isc dhcp | = 4.1-esv-r2 | No fix listed |
| isc dhcp | = 4.1-esv-r3 | No fix listed |
| isc dhcp | = 4.1-esv-r3_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r4 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 4.1-esv-r5 | No fix listed |
| isc dhcp | = 4.1-esv-r5_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r5_rc2 | No fix listed |
| isc dhcp | = 4.1-esv-r6 | No fix listed |
| isc dhcp | = 4.1-esv-r7 | No fix listed |
| isc dhcp | = 4.1-esv-r8 | No fix listed |
| isc dhcp | = 4.1-esv-r8_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r8_rc1 | No fix listed |
| isc dhcp | = 4.1-esv-r9 | No fix listed |
| isc dhcp | = 4.1-esv-r9_b1 | No fix listed |
| isc dhcp | = 4.1-esv-r9_rc1 | No fix listed |
| isc dhcp | = 4.1.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.4 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| ISC DHCP | = ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. | No fix listed |
References
- Debian Security Tracker CVE-2017-3144 vendor-advisory
- 102726 third-party-advisory vdb-entry
- 1040194 third-party-advisory vdb-entry
- RHSA-2018:0158 third-party-advisory vendor-advisory
- kb.isc.org vendor-advisory
- USN-3586-1 third-party-advisory vendor-advisory
- DSA-4133 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking