5.3
Medium
CVE-2017-3144 A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool…
Description
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ISC DHCP | Versions not published |
References
- RHSA-2018:0158 access.redhat.com
- DSA-4133 www.debian.org
- 102726 www.securityfocus.com
- 1040194 www.securitytracker.com
- USN-3586-1 usn.ubuntu.com
- kb.isc.org kb.isc.org
Timeline
- Published
- Last modified
Other CVEs of ISC DHCP
The 6 CVEs of ISC DHCP →
CVE-2022-2929
In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP…
6.5
Medium
CVE-2022-2928
In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called…
6.5
Medium
CVE-2021-25217
In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the…
7.4
High
CVE-2018-5732
Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity…
7.5
High