{"id":"CVE-2017-3144","aliases":["DEBIAN-CVE-2017-3144","DSA-4133-1","EUVD-2017-12285","GHSA-4wqw-h6w8-f8qg","MGASA-2017-0458","RHSA-2018:0158","SUSE-SU-2018:0444-1","SUSE-SU-2018:0532-1","UBUNTU-CVE-2017-3144","USN-3586-1","openSUSE-SU-2024:10715-1"],"status":"published","title":"Failure to properly clean up closed OMAPI connections can exhaust available sockets","description":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.72724,"percentile":0.99451,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2017-12-21T17:43:29Z","modified":"2026-10-24T10:31:02Z","fixes":[{"ecosystem":"Debian:12","package":"isc-dhcp","fixed_in":["4.3.5-3.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"isc-dhcp","fixed_in":["4.3.5-3.1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"dhcp","fixed_in":["4.3.3P1-1.1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"dhcp","fixed_in":["4.3.5-1.1.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhclient","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp-common","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp-debuginfo","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp-libs","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp-devel","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhclient","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp-common","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp-debuginfo","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp-libs","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp-devel","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhclient","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp-common","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp-debuginfo","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp-libs","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp-devel","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhclient","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp-common","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp-debuginfo","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp-libs","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp-devel","fixed_in":["12:4.2.5-58.el7_4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"dhcp","fixed_in":["4.2.4.P2-0.28.5.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"dhcp","fixed_in":["4.2.4.P2-0.28.5.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"dhcp","fixed_in":["4.2.4.P2-0.28.5.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dhcp","fixed_in":["4.3.3-10.11.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"isc-dhcp","fixed_in":["4.2.4-7ubuntu12.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"isc-dhcp","fixed_in":["4.3.3-5ubuntu12.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"isc-dhcp","fixed_in":["4.3.5-3ubuntu5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-3.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-3.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-6+deb8u3"}]}],"versions":["4.3.1-6","4.3.1-6+deb8u1","4.3.1-6+deb8u2","4.3.1-6+deb8u2+kbsd8u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:9","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-3+deb9u1"}]}],"versions":["4.3.5-3"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3P1-1.1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-1.1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dhcp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dhcp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dhcp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dhcp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.2.5-58.el7_4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.28.5.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.28.5.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4.P2-0.28.5.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.11.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-7ubuntu12.12"}]}],"versions":["4.2.4-7ubuntu8","4.2.4-7ubuntu9","4.2.4-7ubuntu10","4.2.4-7ubuntu11","4.2.4-7ubuntu12","4.2.4-7ubuntu12.1","4.2.4-7ubuntu12.2","4.2.4-7ubuntu12.3","4.2.4-7ubuntu12.4","4.2.4-7ubuntu12.5","4.2.4-7ubuntu12.6","4.2.4-7ubuntu12.7","4.2.4-7ubuntu12.8","4.2.4-7ubuntu12.9","4.2.4-7ubuntu12.10"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.9"}]}],"versions":["4.3.1-5ubuntu3","4.3.1-5ubuntu4","4.3.1-5ubuntu5","4.3.3-5ubuntu1","4.3.3-5ubuntu2","4.3.3-5ubuntu4","4.3.3-5ubuntu5","4.3.3-5ubuntu7","4.3.3-5ubuntu8","4.3.3-5ubuntu9","4.3.3-5ubuntu10","4.3.3-5ubuntu11","4.3.3-5ubuntu12","4.3.3-5ubuntu12.1","4.3.3-5ubuntu12.3","4.3.3-5ubuntu12.4","4.3.3-5ubuntu12.6","4.3.3-5ubuntu12.7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-3ubuntu5"}]}],"versions":["4.3.5-3ubuntu2","4.3.5-3ubuntu3","4.3.5-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-7ubuntu12.12"}]}],"versions":["4.2.4-7ubuntu8","4.2.4-7ubuntu9","4.2.4-7ubuntu10","4.2.4-7ubuntu11","4.2.4-7ubuntu12","4.2.4-7ubuntu12.1","4.2.4-7ubuntu12.2","4.2.4-7ubuntu12.3","4.2.4-7ubuntu12.4","4.2.4-7ubuntu12.5","4.2.4-7ubuntu12.6","4.2.4-7ubuntu12.7","4.2.4-7ubuntu12.8","4.2.4-7ubuntu12.9","4.2.4-7ubuntu12.10"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.9"}]}],"versions":["4.3.1-5ubuntu3","4.3.1-5ubuntu4","4.3.1-5ubuntu5","4.3.3-5ubuntu1","4.3.3-5ubuntu2","4.3.3-5ubuntu4","4.3.3-5ubuntu5","4.3.3-5ubuntu7","4.3.3-5ubuntu8","4.3.3-5ubuntu9","4.3.3-5ubuntu10","4.3.3-5ubuntu11","4.3.3-5ubuntu12","4.3.3-5ubuntu12.1","4.3.3-5ubuntu12.3","4.3.3-5ubuntu12.4","4.3.3-5ubuntu12.6","4.3.3-5ubuntu12.7"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2.P1-2.4"}]}],"bundled":5}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"isc","product":"dhcp"},{"vendor":"isc","product":"isc dhcp"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:0158","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4133","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/102726","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1040194","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://usn.ubuntu.com/3586-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://kb.isc.org/docs/aa-01541","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3144","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4wqw-h6w8-f8qg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-3144","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0458.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22204","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UJCMW5N3YHQ7WCRPR2QZBKJZBVJUZ6LG/","tags":["web"]},{"url":"https://kb.isc.org/article/AA-01541","tags":["web","article","report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1522918","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0158.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3144","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180444-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1023415","tags":["report"]},{"url":"https://bugzilla.suse.com/1076119","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3144","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180532-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1059061","tags":["report"]},{"url":"https://bugzilla.suse.com/1073935","tags":["report"]},{"url":"https://bugzilla.suse.com/987170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3144","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3586-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-2774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5733","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25217","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-3144","title":"Failure to properly clean up closed OMAPI connections can exhaust available sockets","description":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","status":"published","published":"2019-01-16T20:00:00Z","modified":"2024-09-16T22:46:13.879Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12285","description":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","status":"published","published":"2019-01-16T20:00:00Z","modified":"2024-09-16T22:46:13Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:54:59.7394Z"}],"ghsa":[{"id":"GHSA-4wqw-h6w8-f8qg","title":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to...","description":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","status":"published","published":"2022-05-13T01:28:59Z","modified":"2023-02-01T05:07:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:50:37.729708Z"}],"nvd":[{"id":"CVE-2017-3144","description":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","status":"published","published":"2019-01-16T20:29:00.627Z","modified":"2026-06-17T01:17:36.89Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:04:19.545286Z"}],"osv":[{"id":"CVE-2017-3144","description":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","status":"published","published":"2019-01-16T20:29:00.627Z","modified":"2026-10-24T10:31:02.726804272Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-3144","description":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","status":"published","published":"2019-01-16T20:29:00.627Z","modified":"2026-09-01T20:03:47.930090384Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"RHSA-2018:0158","title":"Red Hat Security Advisory: dhcp security update","status":"published","published":"2024-09-16T00:53:41Z","modified":"2026-07-01T10:03:21Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-3144","description":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","status":"published","published":"2017-12-31T00:00:00Z","modified":"2026-04-22T11:24:14.872371Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DSA-4133-1","title":"isc-dhcp - security update","status":"published","published":"2018-03-07T00:00:00Z","modified":"2026-03-09T01:18:30.986532Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2017-0458","title":"Updated dhcp packages fix security vulnerability","description":"It was found that the DHCP daemon does not free socket descriptors when\nhandling empty OMAPI messages. An adjacent network attacker could\npotentially use this flaw to send crafted OMAPI messages to the DHCP\ndaemon, thereby leading to denial of service due to exhaustion of file\ndescriptors in the DHCP daemon process.\n","status":"published","published":"2017-12-21T17:43:29Z","modified":"2026-04-16T06:22:46.947385638Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10715-1","title":"dhcp-4.4.2.P1-2.4 on GA media","description":"These are all security issues fixed in the dhcp-4.4.2.P1-2.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:03:03.793159Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:0444-1","title":"Security update for dhcp","description":"This update for dhcp fixes several issues.\n \nThis security issue was fixed:\n\n- CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message\n  is received allowing DoS (bsc#1076119)\n\nThis non-security issue was fixed:\n\n- Enhance dhclient-script to handle static route updates. (bsc#1023415)\n","status":"published","published":"2018-02-14T15:03:33Z","modified":"2025-05-02T04:06:48.353812Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0532-1","title":"Security update for dhcp","description":" This update for dhcp fixes several issues.\n\nThis security issue was fixed:\n\n- CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message\n  is received allowing DoS (bsc#1076119).\n\nThese non-security issues were fixed:\n\n- Optimized if and when DNS client context and ports are initted (bsc#1073935)\n- Relax permission of dhclient-script for libguestfs (bsc#987170)\n- Modify dhclient-script to handle static route updates (bsc#1023415).\n- Use only the 12 least significant bits of an inbound packet's TCI value as the VLAN ID\n  to fix some packages being wrongly discarded by the Linux packet filter. (bsc#1059061)\n","status":"published","published":"2018-02-23T17:37:41Z","modified":"2026-02-04T03:39:38.920318Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3586-1","title":"isc-dhcp vulnerabilities","description":"Konstantin Orekhov discovered that the DHCP server incorrectly handled a\nlarge number of concurrent TCP sessions. A remote attacker could possibly\nuse this issue to cause a denial of service. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-2774)\n\nIt was discovered that the DHCP server incorrectly handled socket\ndescriptors. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2017-3144)\n\nFelix Wilhelm discovered that the DHCP client incorrectly handled certain\nmalformed responses. A remote attacker could use this issue to cause the\nDHCP client to crash, resulting in a denial of service, or possibly execute\narbitrary code. In the default installation, attackers would be isolated by\nthe dhclient AppArmor profile. (CVE-2018-5732)\n\nFelix Wilhelm discovered that the DHCP server incorrectly handled reference\ncounting. A remote attacker could possibly use this issue to cause the DHCP\nserver to crash, resulting in a denial of service. (CVE-2018-5733)\n","status":"published","published":"2018-03-01T17:47:25Z","modified":"2026-04-22T09:44:28.052641Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}