What’s Vulnerable › Vulnerabilities
CVE-2017-3144: Failure to properly clean up closed OMAPI connections can exhaust available sockets
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 72.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-01-16 · updated 2026-06-17
- Weakness: CWE-400
Description
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
Affected products
- Canonical Ubuntu Linux: 14.04, 16.04, 17.10
- Debian Linux: 8.0, 9.0
- ISC DHCP: from 4.2.0 through 4.2.8; from 4.3.0 through 4.3.6; 4.1-esv, 4.1-esv-r1, 4.1-esv-r10, 4.1-esv-r10_b1, 4.1-esv-r10_rc1, 4.1-esv-r11 (+28)
- RedHat Enterprise Linux Desktop: 7.0
- RedHat Enterprise Linux Server: 7.0
- RedHat Enterprise Linux Server Aus: 7.4, 7.6
- RedHat Enterprise Linux Server Eus: 7.4, 7.5, 7.6
- RedHat Enterprise Linux Server Tus: 7.4, 7.6
- RedHat Enterprise Linux Workstation: 7.0
References
- http://www.securityfocus.com/bid/102726
- http://www.securitytracker.com/id/1040194
- https://access.redhat.com/errata/RHSA-2018:0158
- https://kb.isc.org/docs/aa-01541
- https://usn.ubuntu.com/3586-1/
- https://www.debian.org/security/2018/dsa-4133
- http://www.securityfocus.com/bid/102726
- http://www.securitytracker.com/id/1040194
- https://access.redhat.com/errata/RHSA-2018:0158
- https://kb.isc.org/docs/aa-01541
- https://usn.ubuntu.com/3586-1/
- https://www.debian.org/security/2018/dsa-4133
Get alerted when CVE-2017-3144 or the next vulnerability affects your stack