High severity · published Jan 16, 2019
CVE-2017-3144
Failure to properly clean up closed OMAPI connections can exhaust available sockets
7.5
CVSS
72.7%
EPSS
No
On KEV
Description
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)72.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
ISC DHCP · ISC
ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. · source: vendor
DL
Debian Linux · Debian
8.0; 9.0 · source: NVD
DH
Dhcp · Isc
4.2.0 through 4.2.8; 4.3.0 through 4.3.6; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; +30 more · source: NVD
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.4; 7.6 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.4; 7.5; 7.6 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
7.4; 7.6 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
UL
Ubuntu Linux · Canonical
14.04; 16.04; 17.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-3144
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-3144
Third Party Advisory
http://www.securityfocus.com/bid/102726
Third Party Advisory
http://www.securitytracker.com/id/1040194
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0158
Vendor Advisory
https://kb.isc.org/docs/aa-01541
Third Party Advisory
https://usn.ubuntu.com/3586-1/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4133
More from ISC DHCP
7.5
CVE-2018-5733
A malicious client can overflow a reference counter in ISC dhcpd
6.5
CVE-2022-2929
DHCP memory leak
6.5
CVE-2022-2928
An option refcount overflow exists in dhcpd