ID CVE-2017-3144
Summary A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
References
Vulnerable Configurations
  • ISC DHCP 4.1-ESV
    cpe:2.3:a:isc:dhcp:4.1-esv
  • ISC DHCP 4.1-ESV R1
    cpe:2.3:a:isc:dhcp:4.1-esv:r1
  • ISC DHCP 4.1-ESV Release 10
    cpe:2.3:a:isc:dhcp:4.1-esv:r10
  • ISC DHCP 4.1-ESV Release 10 Beta 1
    cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1
  • cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1
    cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1
  • cpe:2.3:a:isc:dhcp:4.1-esv:r11
    cpe:2.3:a:isc:dhcp:4.1-esv:r11
  • ISC DHCP 4.1-ESV Release 11 Beta 1
    cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1
  • ISC DHCP 4.1-ESV Release 11 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1
  • ISC DHCP 4.1-ESV Release11 Release Candidate 2
    cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2
  • ISC DHCP 4.1-ESV Release 12
    cpe:2.3:a:isc:dhcp:4.1-esv:r12
  • ISC DHCP 4.1-ESV Release 12 Beta 1
    cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1
  • cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1
    cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1
  • cpe:2.3:a:isc:dhcp:4.1-esv:r13
    cpe:2.3:a:isc:dhcp:4.1-esv:r13
  • cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1
    cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1
  • cpe:2.3:a:isc:dhcp:4.1-esv:r14
    cpe:2.3:a:isc:dhcp:4.1-esv:r14
  • cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1
    cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1
  • cpe:2.3:a:isc:dhcp:4.1-esv:r15
    cpe:2.3:a:isc:dhcp:4.1-esv:r15
  • ISC DHCP 4.1-ESV R2
    cpe:2.3:a:isc:dhcp:4.1-esv:r2
  • ISC DHCP 4.1-ESV R3
    cpe:2.3:a:isc:dhcp:4.1-esv:r3
  • ISC DHCP 4.1-ESV R3 b1
    cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1
  • ISC DHCP 4.1-ESV-R4
    cpe:2.3:a:isc:dhcp:4.1-esv:r4
  • ISC DHCP 4.1-ESV-R5
    cpe:2.3:a:isc:dhcp:4.1-esv:r5
  • ISC DHCP 4.1-ESV-R5b1
    cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1
  • ISC DHCP 4.1-ESV-R5rc1
    cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1
  • ISC DHCP 4.1-ESV-R5rc2
    cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2
  • ISC DHCP 4.1-ESV-R6
    cpe:2.3:a:isc:dhcp:4.1-esv:r6
  • ISC DHCP 4.1-ESV Release 7
    cpe:2.3:a:isc:dhcp:4.1-esv:r7
  • ISC DHCP 4.1-ESV Release 8
    cpe:2.3:a:isc:dhcp:4.1-esv:r8
  • ISC DHCP 4.1-ESV Release 8 Beta 1
    cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1
  • ISC DHCP 4.1-ESV Release 8 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1
  • ISC DHCP 4.1-ESV Release 9
    cpe:2.3:a:isc:dhcp:4.1-esv:r9
  • ISC DHCP 4.1-ESV Release 9 Beta 1
    cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1
  • ISC DHCP 4.1-ESV Release 9 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1
  • ISC DHCP 4.1.0
    cpe:2.3:a:isc:dhcp:4.1.0
  • ISC DHCP 4.2.0
    cpe:2.3:a:isc:dhcp:4.2.0
  • ISC DHCP 4.2.0 A1
    cpe:2.3:a:isc:dhcp:4.2.0:a1
  • ISC DHCP 4.2.0 A2
    cpe:2.3:a:isc:dhcp:4.2.0:a2
  • ISC DHCP 4.2.0 B1
    cpe:2.3:a:isc:dhcp:4.2.0:b1
  • ISC DHCP 4.2.0 B1
    cpe:2.3:a:isc:dhcp:4.2.0:b2
  • ISC DHCP 4.2.0-P1
    cpe:2.3:a:isc:dhcp:4.2.0:p1
  • ISC DHCP 4.2.0 Patch 2
    cpe:2.3:a:isc:dhcp:4.2.0:p2
  • ISC DHCP 4.2.0 release candidate 1
    cpe:2.3:a:isc:dhcp:4.2.0:rc1
  • ISC DHCP 4.2.1
    cpe:2.3:a:isc:dhcp:4.2.1
  • ISC DHCP 4.2.1 b1
    cpe:2.3:a:isc:dhcp:4.2.1:b1
  • ISC DHCP 4.2.1 Patch 1
    cpe:2.3:a:isc:dhcp:4.2.1:p1
  • ISC DHCP 4.2.1 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.2.1:rc1
  • ISC DHCP 4.2.2
    cpe:2.3:a:isc:dhcp:4.2.2
  • ISC DHCP 4.2.2 b1
    cpe:2.3:a:isc:dhcp:4.2.2:b1
  • ISC DHCP 4.2.2 release candidate 1
    cpe:2.3:a:isc:dhcp:4.2.2:rc1
  • ISC DHCP 4.2.3
    cpe:2.3:a:isc:dhcp:4.2.3
  • ISC DHCP 4.2.3-p1
    cpe:2.3:a:isc:dhcp:4.2.3:p1
  • ISC DHCP 4.2.3-p2
    cpe:2.3:a:isc:dhcp:4.2.3:p2
  • ISC DHCP 4.2.4
    cpe:2.3:a:isc:dhcp:4.2.4
  • ISC DHCP 4.2.4 Beta 1
    cpe:2.3:a:isc:dhcp:4.2.4:b1
  • ISC DHCP 4.2.4-p1
    cpe:2.3:a:isc:dhcp:4.2.4:p1
  • ISC DHCP 4.2.4 Patch 2
    cpe:2.3:a:isc:dhcp:4.2.4:p2
  • ISC DHCP 4.2.4 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.2.4:rc1
  • ISC DHCP 4.2.4 Release Candidate 2
    cpe:2.3:a:isc:dhcp:4.2.4:rc2
  • ISC DHCP 4.2.5
    cpe:2.3:a:isc:dhcp:4.2.5
  • ISC DHCP 4.2.5 Beta 1
    cpe:2.3:a:isc:dhcp:4.2.5:b1
  • ISC DHCP 4.2.5 Patch 1
    cpe:2.3:a:isc:dhcp:4.2.5:p1
  • ISC DHCP 4.2.5 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.2.5:rc1
  • ISC DHCP 4.2.6
    cpe:2.3:a:isc:dhcp:4.2.6
  • ISC DHCP 4.2.6 Beta 1
    cpe:2.3:a:isc:dhcp:4.2.6:b1
  • ISC DHCP 4.2.6 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.2.6:rc1
  • ISC DHCP 4.2.7
    cpe:2.3:a:isc:dhcp:4.2.7
  • ISC DHCP 4.2.7 Beta 1
    cpe:2.3:a:isc:dhcp:4.2.7:b1
  • ISC DHCP 4.2.7 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.2.7:rc1
  • ISC DHCP 4.2.8
    cpe:2.3:a:isc:dhcp:4.2.8
  • ISC DHCP 4.2.8 Beta 1
    cpe:2.3:a:isc:dhcp:4.2.8:b1
  • ISC DHCP 4.2.8 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.2.8:rc1
  • ISC DHCP 4.2.8 Release Candidate 2
    cpe:2.3:a:isc:dhcp:4.2.8:rc2
  • ISC DHCP 4.3.0
    cpe:2.3:a:isc:dhcp:4.3.0
  • ISC DHCP 4.3.0 Alpha 1
    cpe:2.3:a:isc:dhcp:4.3.0:a1
  • ISC DHCP 4.3.0 Beta 1
    cpe:2.3:a:isc:dhcp:4.3.0:b1
  • ISC DHCP 4.3.0 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.3.0:rc1
  • ISC DHCP 4.3.1
    cpe:2.3:a:isc:dhcp:4.3.1
  • ISC DHCP 4.3.1 Beta 1
    cpe:2.3:a:isc:dhcp:4.3.1:b1
  • ISC DHCP 4.3.1 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.3.1:rc1
  • ISC DHCP 4.3.2
    cpe:2.3:a:isc:dhcp:4.3.2
  • ISC DHCP 4.3.2 Beta 1
    cpe:2.3:a:isc:dhcp:4.3.2:b1
  • ISC DHCP 4.3.2 Release Candidate 1
    cpe:2.3:a:isc:dhcp:4.3.2:rc1
  • ISC DHCP 4.3.2 Release Candidate 2
    cpe:2.3:a:isc:dhcp:4.3.2:rc2
  • ISC DHCP 4.3.4
    cpe:2.3:a:isc:dhcp:4.3.3
  • ISC DHCP 4.3.3 Beta 1
    cpe:2.3:a:isc:dhcp:4.3.3:b1
  • ISC DHCP 4.3.5
    cpe:2.3:a:isc:dhcp:4.3.5
  • ISC DHCP 4.3.6
    cpe:2.3:a:isc:dhcp:4.3.6
  • RedHat Enterprise Linux Desktop 7.0
    cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
  • RedHat Enterprise Linux Server 7.0
    cpe:2.3:o:redhat:enterprise_linux_server:7.0
  • Red Hat Enterprise Linux Server Advanced mission critical Update Support (AUS) 7.4
    cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
  • Red Hat Enterprise Linux Server Advanced mission critical Update Support (AUS) 7.6
    cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
  • Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.4
    cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4
  • Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.5
    cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
  • Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.6
    cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4
    cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4
  • Red Hat Enterprise Linux Server Telecommunications Update Service (TUS) 7.6
    cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
  • RedHat Enterprise Linux Workstation 7.0
    cpe:2.3:o:redhat:enterprise_linux_workstation:7.0
  • Canonical Ubuntu Linux 14.04 LTS (Long-Term Support)
    cpe:2.3:o:canonical:ubuntu_linux:14.04:-:-:-:lts
  • Canonical Ubuntu Linux 16.04 LTS (Long-Term Support)
    cpe:2.3:o:canonical:ubuntu_linux:16.04:-:-:-:lts
  • Canonical Ubuntu Linux 17.10
    cpe:2.3:o:canonical:ubuntu_linux:17.10
  • Debian Linux 8.0 (Jessie)
    cpe:2.3:o:debian:debian_linux:8.0
  • Debian Linux 9.0
    cpe:2.3:o:debian:debian_linux:9.0
CVSS
Base: 5.0
Impact:
Exploitability:
CWE CWE-400
CAPEC
  • XML Ping of the Death
    An attacker initiates a resource depletion attack where a large number of small XML messages are delivered at a sufficiently rapid rate to cause a denial of service or crash of the target. Transactions such as repetitive SOAP transactions can deplete resources faster than a simple flooding attack because of the additional resources used by the SOAP protocol and the resources necessary to process SOAP messages. The transactions used are immaterial as long as they cause resource utilization on the target. In other words, this is a normal flooding attack augmented by using messages that will require extra processing on the target.
  • XML Entity Expansion
    An attacker submits an XML document to a target application where the XML document uses nested entity expansion to produce an excessively large output XML. XML allows the definition of macro-like structures that can be used to simplify the creation of complex structures. However, this capability can be abused to create excessive demands on a processor's CPU and memory. A small number of nested expansions can result in an exponential growth in demands on memory.
  • Inducing Account Lockout
    An attacker leverages the security functionality of the system aimed at thwarting potential attacks to launch a denial of service attack against a legitimate system user. Many systems, for instance, implement a password throttling mechanism that locks an account after a certain number of incorrect log in attempts. An attacker can leverage this throttling mechanism to lock a legitimate user out of their own account. The weakness that is being leveraged by an attacker is the very security feature that has been put in place to counteract attacks.
  • Violating Implicit Assumptions Regarding XML Content (aka XML Denial of Service (XDoS))
    XML Denial of Service (XDoS) can be applied to any technology that utilizes XML data. This is, of course, most distributed systems technology including Java, .Net, databases, and so on. XDoS is most closely associated with web services, SOAP, and Rest, because remote service requesters can post malicious XML payloads to the service provider designed to exhaust the service provider's memory, CPU, and/or disk space. The main weakness in XDoS is that the service provider generally must inspect, parse, and validate the XML messages to determine routing, workflow, security considerations, and so on. It is exactly these inspection, parsing, and validation routines that XDoS targets. There are three primary attack vectors that XDoS can navigate Target CPU through recursion: attacker creates a recursive payload and sends to service provider Target memory through jumbo payloads: service provider uses DOM to parse XML. DOM creates in memory representation of XML document, but when document is very large (for example, north of 1 Gb) service provider host may exhaust memory trying to build memory objects. XML Ping of death: attack service provider with numerous small files that clog the system. All of the above attacks exploit the loosely coupled nature of web services, where the service provider has little to no control over the service requester and any messages the service requester sends.
nessus via4
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201804-05.NASL
    description The remote host is affected by the vulnerability described in GLSA-201804-05 (ISC DHCP: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in ISC DHCP. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could execute arbitrary code, cause a Denial of Service condition, or have other unspecified impacts. Workaround : There are no known workarounds at this time for CVE-2018-5732 or CVE-2018-5733. In accordance with upstream documentation, the recommended workaround for CVE-2017-3144 is, “to disallow access to the OMAPI control port from unauthorized clients (in accordance with best practices for server operation).”
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 108926
    published 2018-04-10
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=108926
    title GLSA-201804-05 : ISC DHCP: Multiple vulnerabilities
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-4133.NASL
    description Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2017-3144 It was discovered that the DHCP server does not properly clean up closed OMAPI connections, which can lead to exhaustion of the pool of socket descriptors available to the DHCP server, resulting in denial of service. - CVE-2018-5732 Felix Wilhelm of the Google Security Team discovered that the DHCP client is prone to an out-of-bound memory access vulnerability when processing specially constructed DHCP options responses, resulting in potential execution of arbitrary code by a malicious DHCP server. - CVE-2018-5733 Felix Wilhelm of the Google Security Team discovered that the DHCP server does not properly handle reference counting when processing client requests. A malicious client can take advantage of this flaw to cause a denial of service (dhcpd crash) by sending large amounts of traffic.
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 107199
    published 2018-03-08
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=107199
    title Debian DSA-4133-1 : isc-dhcp - security update
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2018-0158.NASL
    description From Red Hat Security Advisory 2018:0158 : An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network. Security Fix(es) : * It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144)
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 106365
    published 2018-01-26
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106365
    title Oracle Linux 7 : dhcp (ELSA-2018-0158)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2018-0444-1.NASL
    description This update for dhcp fixes several issues. This security issue was fixed : - CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message is received allowing DoS (bsc#1076119) The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 106836
    published 2018-02-15
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106836
    title SUSE SLES11 Security Update : dhcp (SUSE-SU-2018:0444-1)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2018-0158.NASL
    description An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network. Security Fix(es) : * It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144)
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 106354
    published 2018-01-26
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106354
    title CentOS 7 : dhcp (CESA-2018:0158)
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2018-207.NASL
    description This update for dhcp fixes several issues. This security issue was fixed : - CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message is received allowing DoS (bsc#1076119). These non-security issues were fixed : - Optimized if and when DNS client context and ports are initted (bsc#1073935) - Relax permission of dhclient-script for libguestfs (bsc#987170) - Modify dhclient-script to handle static route updates (bsc#1023415). - Use only the 12 least significant bits of an inbound packet's TCI value as the VLAN ID to fix some packages being wrongly discarded by the Linux packet filter. (bsc#1059061) This update was imported from the SUSE:SLE-12-SP1:Update update project.
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 106998
    published 2018-02-26
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106998
    title openSUSE Security Update : dhcp (openSUSE-2018-207)
  • NASL family Misc.
    NASL id ISC_DHCP_AA-01541.NASL
    description The DHCP server version installed on the remote host is 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, or 4.3.0 to 4.3.6. It is, therefore, vulnerable to a denial of service condition with in the omapi_connection_writer() function of the omapip/buffer.c script due to improper handling of an empty message. A local attacker could potentially exhaust the available descriptors.
    last seen 2019-02-21
    modified 2018-07-12
    plugin id 106202
    published 2018-01-19
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106202
    title ISC DHCP 4.1.0 to 4.1-ESV-R15 / 4.2.0 to 4.2.8 / 4.3.0 to 4.3.6 DoS vulnerability
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20180125_DHCP_ON_SL7_X.NASL
    description Security Fix(es) : - It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144)
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 106339
    published 2018-01-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106339
    title Scientific Linux Security Update : dhcp on SL7.x x86_64
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-3586-1.NASL
    description Konstantin Orekhov discovered that the DHCP server incorrectly handled a large number of concurrent TCP sessions. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-2774) It was discovered that the DHCP server incorrectly handled socket descriptors. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2017-3144) Felix Wilhelm discovered that the DHCP client incorrectly handled certain malformed responses. A remote attacker could use this issue to cause the DHCP client to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, attackers would be isolated by the dhclient AppArmor profile. (CVE-2018-5732) Felix Wilhelm discovered that the DHCP server incorrectly handled reference counting. A remote attacker could possibly use this issue to cause the DHCP server to crash, resulting in a denial of service. (CVE-2018-5733). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 107117
    published 2018-03-02
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=107117
    title Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : isc-dhcp vulnerabilities (USN-3586-1)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2018-0158.NASL
    description An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network. Security Fix(es) : * It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144)
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 106332
    published 2018-01-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106332
    title RHEL 7 : dhcp (RHSA-2018:0158)
  • NASL family Huawei Local Security Checks
    NASL id EULEROS_SA-2018-1036.NASL
    description According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2019-02-12
    plugin id 106764
    published 2018-02-13
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106764
    title EulerOS 2.0 SP2 : dhcp (EulerOS-SA-2018-1036)
  • NASL family Amazon Linux Local Security Checks
    NASL id AL2_ALAS-2018-963.NASL
    description Omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality.(CVE-2017-3144)
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 109131
    published 2018-04-18
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109131
    title Amazon Linux 2 : dhcp (ALAS-2018-963)
  • NASL family Huawei Local Security Checks
    NASL id EULEROS_SA-2018-1241.NASL
    description According to the version of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2019-02-12
    plugin id 117550
    published 2018-09-18
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=117550
    title EulerOS Virtualization 2.5.0 : dhcp (EulerOS-SA-2018-1241)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2018-0532-1.NASL
    description This update for dhcp fixes several issues. This security issue was fixed : - CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message is received allowing DoS (bsc#1076119). The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2019-02-08
    plugin id 107002
    published 2018-02-26
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=107002
    title SUSE SLED12 / SLES12 Security Update : dhcp (SUSE-SU-2018:0532-1)
  • NASL family Huawei Local Security Checks
    NASL id EULEROS_SA-2018-1035.NASL
    description According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2019-02-12
    plugin id 106763
    published 2018-02-13
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=106763
    title EulerOS 2.0 SP1 : dhcp (EulerOS-SA-2018-1035)
redhat via4
advisories
bugzilla
id 1522918
title CVE-2017-3144 dhcp: omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service
oval
AND
  • OR
    • comment Red Hat Enterprise Linux 7 Client is installed
      oval oval:com.redhat.rhsa:tst:20140675001
    • comment Red Hat Enterprise Linux 7 Server is installed
      oval oval:com.redhat.rhsa:tst:20140675002
    • comment Red Hat Enterprise Linux 7 Workstation is installed
      oval oval:com.redhat.rhsa:tst:20140675003
    • comment Red Hat Enterprise Linux 7 ComputeNode is installed
      oval oval:com.redhat.rhsa:tst:20140675004
  • OR
    • AND
      • comment dhclient is earlier than 12:4.2.5-58.el7_4.1
        oval oval:com.redhat.rhsa:tst:20180158011
      • comment dhclient is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20100923008
    • AND
      • comment dhcp is earlier than 12:4.2.5-58.el7_4.1
        oval oval:com.redhat.rhsa:tst:20180158009
      • comment dhcp is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20100923006
    • AND
      • comment dhcp-common is earlier than 12:4.2.5-58.el7_4.1
        oval oval:com.redhat.rhsa:tst:20180158007
      • comment dhcp-common is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20111819010
    • AND
      • comment dhcp-devel is earlier than 12:4.2.5-58.el7_4.1
        oval oval:com.redhat.rhsa:tst:20180158005
      • comment dhcp-devel is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20100923010
    • AND
      • comment dhcp-libs is earlier than 12:4.2.5-58.el7_4.1
        oval oval:com.redhat.rhsa:tst:20180158013
      • comment dhcp-libs is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20162590008
rhsa
id RHSA-2018:0158
released 2018-01-25
severity Moderate
title RHSA-2018:0158: dhcp security update (Moderate)
rpms
  • dhclient-12:4.2.5-58.el7_4.1
  • dhcp-12:4.2.5-58.el7_4.1
  • dhcp-common-12:4.2.5-58.el7_4.1
  • dhcp-devel-12:4.2.5-58.el7_4.1
  • dhcp-libs-12:4.2.5-58.el7_4.1
refmap via4
bid 102726
confirm https://kb.isc.org/docs/aa-01541
debian DSA-4133
sectrack 1040194
ubuntu USN-3586-1
Last major update 16-01-2019 - 15:29
Published 16-01-2019 - 15:29
Last modified 07-02-2019 - 14:09
Back to Top