Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-3144

Fixed in a distro release EPSS 73%CVSS 5.3

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

Published 2019-01-16 · CVE record · OSV

Products: ISC DHCP

Distro releases

ReleasePackageFixed in
Debian 12isc-dhcp4.3.5-3.1
Debian 13isc-dhcp4.3.5-3.1
Debian 8isc-dhcp4.3.1-6+deb8u3
Debian 9isc-dhcp4.3.5-3+deb9u1
Red Hat Enterprise Linux 7dhclient12:4.2.5-58.el7_4.1
Red Hat Enterprise Linux 7dhcp12:4.2.5-58.el7_4.1
Red Hat Enterprise Linux 7dhcp-common12:4.2.5-58.el7_4.1
Red Hat Enterprise Linux 7dhcp-debuginfo12:4.2.5-58.el7_4.1
Red Hat Enterprise Linux 7dhcp-devel12:4.2.5-58.el7_4.1
Red Hat Enterprise Linux 7dhcp-libs12:4.2.5-58.el7_4.1
SUSE Linux Enterprise Desktop 12 SP2dhcp4.3.3-10.11.1
SUSE Linux Enterprise Desktop 12 SP3dhcp4.3.3-10.11.1
SUSE Linux Enterprise Server 11 SP4dhcp4.2.4.P2-0.28.5.3
SUSE Linux Enterprise Server 12 SP2dhcp4.3.3-10.11.1
SUSE Linux Enterprise Server 12 SP3dhcp4.3.3-10.11.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2dhcp4.3.3-10.11.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4dhcp4.2.4.P2-0.28.5.3
SUSE Linux Enterprise Server for SAP Applications 12 SP2dhcp4.3.3-10.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3dhcp4.3.3-10.11.1
SUSE Linux Enterprise Software Development Kit 11 SP4dhcp4.2.4.P2-0.28.5.3
SUSE Linux Enterprise Software Development Kit 12 SP2dhcp4.3.3-10.11.1
SUSE Linux Enterprise Software Development Kit 12 SP3dhcp4.3.3-10.11.1
Ubuntu 14.04 LTSisc-dhcp4.2.4-7ubuntu12.12
Ubuntu 16.04 LTSisc-dhcp4.3.3-5ubuntu12.9
Ubuntu 18.04 LTSisc-dhcp4.3.5-3ubuntu5
openSUSE Tumbleweeddhcp4.4.2.P1-2.4