Read the docs
TI-2017-02364 Aliases CVE-2017-3144GHSA-4wqw-h6w8-f8qg

Failure to properly clean up closed OMAPI connections can exhaust available sockets

Priority HIGH 71CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-400.

Summary

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

Why it matters now

EPSS 0.72724 99th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ISCISC DHCPISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.—No fix listedCNA
  • ISC DHCP VendorISC Affected ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. Fixed in — No fix listed CNA

CPE configurations NVD · 50

CPEVersionsRoleVendor
cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*4.2.0 – 4.2.8; 4.3.0 – 4.3.6VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*4.1-esvVulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*4.1-esv r1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*4.1-esv r10VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*4.1-esv r10_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*4.1-esv r10_rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*4.1-esv r11VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*4.1-esv r11_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*4.1-esv r11_rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*4.1-esv r11_rc2VulnerableISC
  • cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:* Versions 4.2.0 – 4.2.8; 4.3.0 – 4.3.6 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:* Versions 4.1-esv Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:* Versions 4.1-esv r1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:* Versions 4.1-esv r10 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:* Versions 4.1-esv r10_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:* Versions 4.1-esv r10_rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:* Versions 4.1-esv r11 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:* Versions 4.1-esv r11_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:* Versions 4.1-esv r11_rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:* Versions 4.1-esv r11_rc2 Vulnerable ·ISC
Show 40 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*4.1-esv r12VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*4.1-esv r12_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*4.1-esv r12_p1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*4.1-esv r13VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*4.1-esv r13_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*4.1-esv r14VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*4.1-esv r14_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*4.1-esv r15VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*4.1-esv r2VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*4.1-esv r3VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*4.1-esv r3_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*4.1-esv r4VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*4.1-esv r5VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*4.1-esv r5_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*4.1-esv r5_rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*4.1-esv r5_rc2VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*4.1-esv r6VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*4.1-esv r7VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*4.1-esv r8VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*4.1-esv r8_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*4.1-esv r8_rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*4.1-esv r9VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*4.1-esv r9_b1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*4.1-esv r9_rc1VulnerableISC
cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableISC
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*17.10VulnerableCanonical
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
  • cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:* Versions 4.1-esv r12 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:* Versions 4.1-esv r12_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:* Versions 4.1-esv r12_p1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:* Versions 4.1-esv r13 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:* Versions 4.1-esv r13_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:* Versions 4.1-esv r14 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:* Versions 4.1-esv r14_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:* Versions 4.1-esv r15 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:* Versions 4.1-esv r2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:* Versions 4.1-esv r3 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:* Versions 4.1-esv r3_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:* Versions 4.1-esv r4 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:* Versions 4.1-esv r5 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:* Versions 4.1-esv r5_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:* Versions 4.1-esv r5_rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:* Versions 4.1-esv r5_rc2 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:* Versions 4.1-esv r6 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:* Versions 4.1-esv r7 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:* Versions 4.1-esv r8 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:* Versions 4.1-esv r8_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:* Versions 4.1-esv r8_rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:* Versions 4.1-esv r9 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:* Versions 4.1-esv r9_b1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:* Versions 4.1-esv r9_rc1 Vulnerable ·ISC
  • cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·ISC
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* Versions 17.10 Vulnerable ·Canonical
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian

Remediation

Red Hat 1 advisory

  • RHSA-2018:0158 Released 2018-01-25 · Red Hat rating Moderate
    dhcp security update
    • Red Hat Enterprise Linux Client (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +1
    • Red Hat Enterprise Linux Client Optional (v. 7) dhcp-12:4.2.5-58.el7_4.1, dhcp-devel-12:4.2.5-58.el7_4.1
    • Red Hat Enterprise Linux ComputeNode (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +1
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) dhcp-12:4.2.5-58.el7_4.1, dhcp-devel-12:4.2.5-58.el7_4.1
    • Red Hat Enterprise Linux Server (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +2
    • Red Hat Enterprise Linux Server Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.1, dhcp-devel-12:4.2.5-58.el7_4.1.ppc
    • Red Hat Enterprise Linux Workstation (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +1
    • Red Hat Enterprise Linux Workstation Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.1
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) dhclient-12:4.2.5-58.el7_4.1, dhcp-12:4.2.5-58.el7_4.1, dhcp-common-12:4.2.5-58.el7_4.1 +1
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    ISC DHCP — DSA-4133

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2018-04140 A malicious client can overflow a reference counter in ISC dhcpdPriority MEDIUM 52
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2018:0158
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2018:0158
Not affected: 2 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-3144
  2. 2026-10-03 Alias added: GHSA-4wqw-h6w8-f8qg

References

Advisory 4

  • TI-2011-00858 dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and… CVSS 2.0HIGH 7.5
  • TI-2015-07072 ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote… CVSS 3.0MEDIUM 6.5
  • TI-2016-02318 ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the… CVSS 3.1MEDIUM 5.9
  • TI-2009-00661 Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC… CVSS 2.0HIGH 10.0
  • TI-2010-02068 ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a… CVSS 2.0MEDIUM 5.0
  • TI-2011-02408 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… CVSS 2.0HIGH 7.8
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences