Red Hat Security Advisory

RHSA-2018:0158

dhcp security update

Released 2018-01-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +1
Red Hat Enterprise Linux Client Optional (v. 7) dhcp-12:4.2.5-58.el7_4.1, dhcp-devel-12:4.2.5-58.el7_4.1
Red Hat Enterprise Linux ComputeNode (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) dhcp-12:4.2.5-58.el7_4.1, dhcp-devel-12:4.2.5-58.el7_4.1
Red Hat Enterprise Linux Server (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +2
Red Hat Enterprise Linux Server Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.1, dhcp-devel-12:4.2.5-58.el7_4.1.ppc
Red Hat Enterprise Linux Workstation (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +1
Red Hat Enterprise Linux Workstation Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.1

Fixes 1 record

TI-2017-02364 CVE-2017-3144 · GHSA-4wqw-h6w8-f8qg

Failure to properly clean up closed OMAPI connections can exhaust available sockets

HIGH 71

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.72724 Published 2019-01-16 Fixed CWE-400