CVE-2017-3144

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-3144
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3144.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-3144
Related
Published
2019-01-16T20:29:00Z
Modified
2024-10-25T23:55:46.537960Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

References

Affected packages

Debian:11 / isc-dhcp

Package

Name
isc-dhcp
Purl
pkg:deb/debian/isc-dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.5-3.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / isc-dhcp

Package

Name
isc-dhcp
Purl
pkg:deb/debian/isc-dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.5-3.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / isc-dhcp

Package

Name
isc-dhcp
Purl
pkg:deb/debian/isc-dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.5-3.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / gitlab.isc.org/isc-projects/dhcp

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/dhcp
Events
Last affected
034fe1d0edc30d6912718cb547f12b8c215b4cf2
Last affected
192a3579019c9f0c4095371d783c22efd74ba9bf
Last affected
240d9b62e137cad28a08893326ab66d4cd7bbb89
Last affected
2a00efe8700df8bfd11881fdabeb18f33e8d9fe6
Last affected
2a4ff20abc29fe2647de68e6a6eea8e49e6ce941
Last affected
2d5ca865b7268d2f60a485c9a50f96b7890dd51f
Last affected
331193dd54344dc74ca1987797d99bb57ba277fe
Last affected
3709b7fc844ab8384ba40a1be3cf7916168423e1
Last affected
3a1078b6d1292305c9e784cdce97d9ae6934cc01
Last affected
4f5c8255511e3600288eddfa6a4e594fde107458
Last affected
54ec15cba2c5157bedf45cae9d062814e75e928e
Last affected
5e1ef01178527149e5673002dbdc3be18046c77e
Last affected
703432ad969076f6a4eb9566db5634cceeb12572
Last affected
8423b4587ea3eef2a55b9ab693c828d46e238f0a
Last affected
847b32280a9d52c3f30db4dc2ed620abbeda708c
Introduced
079f747eb20d40e80c65e8a984d6c50860560b3c
Last affected
8541c4fcbc6364800775234bacfe646ef16bfd38
Last affected
9f35323a8abe2ed4bc567b2b2613fc3ef9254e8f
Last affected
9ff9a4e8131e7b5f144050b538ff866f89c98ffc
Last affected
a05db3d943208ab168a9aba9117706bb58baea7c
Last affected
a185640cf1d8fd71b5c62ac4b4c9572996248b63
Last affected
a43c1faf96b8647d2a87fc0b5ef044c79cc1c852
Last affected
b39dd193dc3d189d3669866d73a87172545e2a4b
Last affected
b54c35c0c840395bc1e62dd8484eab610837d01a
Last affected
b5672a6ffffad5c2455e5d50e4c2e5ef1e99f925
Last affected
b8ee38f1a50299e35c37a0eeadce30051dda7696
Introduced
5de62c8b34a94e66269b39c663cd222047216306
Last affected
c1bd79a15e9b689e8a18538aaedec0ab8bd04b17
Last affected
c4a3c3ee213715ff5a3f6255001148e333029741
Last affected
c57dbea3ca687b929a7bf8171c21ad9dc66461bf
Last affected
d6f132e4523d4a317f18a395ade0c4927867bc67
Last affected
db3e58c1515b19d6fb4f1aa46445cbbcb4261e65
Last affected
dda169525b6109935c76d2a7f0c479ff4fda0e82
Last affected
f0bd8bdff79188c900a31e763377eb1d25e80eb0
Last affected
f10f02aa92b38606897523e19ad090fc0464a955
Last affected
f615b2d9be5ebe1762de0677a1e5c151519217aa
Last affected
f9eeba56095a43b985292025a2b4a46085cff2ea

Affected versions

Other

v4_3_0
v4_3_1
v4_3_1b1
v4_3_1rc1
v4_3_2
v4_3_2b1
v4_3_2rc1
v4_3_2rc2
v4_3_3
v4_3_3b1
v4_3_4
v4_3_4b1
v4_3_5
v4_3_5b1
v4_3_6
v4_3_6b1

v4_3_2.*

v4_3_2.pre-beta