PT-2017-15685 · Isc+5 · Isc Dhcp+5

Published 2017-12-21 · Updated 2024-06-15 · CVE-2017-3144

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ISC DHCP versions 4.1.0 through 4.1-ESV-R15 ISC DHCP versions 4.2.0 through 4.2.8 ISC DHCP versions 4.3.0 through 4.3.6

Description A vulnerability exists due to the failure to properly clean up closed OMAPI connections, which can lead to exhaustion of the pool of socket descriptors available to the DHCP server.

Recommendations For versions 4.1.0 through 4.1-ESV-R15, update to a version outside of this range to resolve the issue. For versions 4.2.0 through 4.2.8, update to a version outside of this range to resolve the issue. For versions 4.3.0 through 4.3.6, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the use of OMAPI connections to minimize the risk of socket descriptor exhaustion.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2018-1300

CESA-2018_0158

CVE-2017-3144

DSA-4133-1

MGASA-2017-0458

OPENSUSE-SU-2024:10715-1

RHSA-2018:0158

RHSA-2018_0158

SUSE-SU-2018:0444-1

SUSE-SU-2018:0532-1

SUSE-SU-2018_0444-1

SUSE-SU-2018_0532-1

USN-3586-1

Affected Products

Alt Linux

Centos

Isc Dhcp

Red Hat

Suse

Ubuntu

References · 61

• https://bdu.fstec.ru/vul/2018-00357 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3144 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3144 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3144 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:0532-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-5732 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UJCMW5N3YHQ7WCRPR2QZBKJZBVJUZ6LG · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0444-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5733 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3144 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0158 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2774 · Security Note
• https://linux.oracle.com/errata/ELSA-2018-0158.html · Vendor Advisory
• https://usn.ubuntu.com/3586-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-4133-1 · Vendor Advisory