Vulnerability details

CVE-2017-3144

ISC DHCP

Failure to properly clean up closed OMAPI connections can exhaust available sockets

CVSS 3.0

5.3Medium

Official description

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

CVSS scores

Score	Version	Source	Vector
5.3Medium	3.0	CVEProject cvelistV5 (CNA) (isc)	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`

Affected products

Vendor	Product	Versions	Source
ISC	ISC DHCP	ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected	CVEProject cvelistV5 (CNA)

References and advisories

https://access.redhat.com/errata/RHSA-2018:0158 vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4133 vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/102726 vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1040194 vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3586-1/ vendor-advisoryx_refsource_UBUNTU
https://kb.isc.org/docs/aa-01541 x_refsource_CONFIRM

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2019-01-16
Last updated: 2024-09-17
State: Published
Assigner (CNA): isc
Kolun priority: 43 · Medium

Exploit prediction (EPSS)

72.72%

Probability of exploitation in 30 days

99.4%

Percentile (among all CVEs)