{"id":"CVE-2017-3144","details":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","modified":"2026-07-08T05:49:46.660519939Z","published":"2019-01-16T20:29:00.627Z","related":["SUSE-SU-2018:0444-1","SUSE-SU-2018:0532-1","openSUSE-SU-2024:10715-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"17.10"},{"last_affected":"17.10"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"},{"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING"},{"vendor_product":"redhat:enterprise_linux_desktop","cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"},{"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server","cpes":["cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"]},{"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_aus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.6"},{"last_affected":"7.6"}]},{"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.5"},{"last_affected":"7.5"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_eus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"]},{"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_tus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_workstation"}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/102726"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1040194"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0158"},{"type":"ADVISORY","url":"https://kb.isc.org/docs/aa-01541"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3586-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4133"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/dhcp","events":[{"introduced":"079f747eb20d40e80c65e8a984d6c50860560b3c"},{"last_affected":"8541c4fcbc6364800775234bacfe646ef16bfd38"},{"introduced":"5de62c8b34a94e66269b39c663cd222047216306"},{"last_affected":"c1bd79a15e9b689e8a18538aaedec0ab8bd04b17"},{"introduced":"b39dd193dc3d189d3669866d73a87172545e2a4b"},{"last_affected":"2a4ff20abc29fe2647de68e6a6eea8e49e6ce941"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.2.0"},{"last_affected":"4.2.8"},{"introduced":"4.3.0"},{"last_affected":"4.3.6"},{"introduced":"4.1-esv-NA"},{"last_affected":"4.1-esv-NA"},{"introduced":"4.1-esv-r1"},{"last_affected":"4.1-esv-r1"},{"introduced":"4.1-esv-r10"},{"last_affected":"4.1-esv-r10"},{"introduced":"4.1-esv-r10_b1"},{"last_affected":"4.1-esv-r10_b1"},{"introduced":"4.1-esv-r10_rc1"},{"last_affected":"4.1-esv-r10_rc1"},{"introduced":"4.1-esv-r11"},{"last_affected":"4.1-esv-r11"},{"introduced":"4.1-esv-r11_b1"},{"last_affected":"4.1-esv-r11_b1"},{"introduced":"4.1-esv-r11_rc1"},{"last_affected":"4.1-esv-r11_rc1"},{"introduced":"4.1-esv-r11_rc2"},{"last_affected":"4.1-esv-r11_rc2"},{"introduced":"4.1-esv-r12"},{"last_affected":"4.1-esv-r12"},{"introduced":"4.1-esv-r12_b1"},{"last_affected":"4.1-esv-r12_b1"},{"introduced":"4.1-esv-r12_p1"},{"last_affected":"4.1-esv-r12_p1"},{"introduced":"4.1-esv-r13"},{"last_affected":"4.1-esv-r13"},{"introduced":"4.1-esv-r13_b1"},{"last_affected":"4.1-esv-r13_b1"},{"introduced":"4.1-esv-r14"},{"last_affected":"4.1-esv-r14"},{"introduced":"4.1-esv-r14_b1"},{"last_affected":"4.1-esv-r14_b1"},{"introduced":"4.1-esv-r15"},{"last_affected":"4.1-esv-r15"},{"introduced":"4.1-esv-r2"},{"last_affected":"4.1-esv-r2"},{"introduced":"4.1-esv-r3"},{"last_affected":"4.1-esv-r3"},{"introduced":"4.1-esv-r3_b1"},{"last_affected":"4.1-esv-r3_b1"},{"introduced":"4.1-esv-r4"},{"last_affected":"4.1-esv-r4"},{"introduced":"4.1-esv-r5"},{"last_affected":"4.1-esv-r5"},{"introduced":"4.1-esv-r5_b1"},{"last_affected":"4.1-esv-r5_b1"},{"introduced":"4.1-esv-r5_rc1"},{"last_affected":"4.1-esv-r5_rc1"},{"introduced":"4.1-esv-r5_rc2"},{"last_affected":"4.1-esv-r5_rc2"},{"introduced":"4.1-esv-r6"},{"last_affected":"4.1-esv-r6"},{"introduced":"4.1-esv-r7"},{"last_affected":"4.1-esv-r7"},{"introduced":"4.1-esv-r8"},{"last_affected":"4.1-esv-r8"},{"introduced":"4.1-esv-r8_b1"},{"last_affected":"4.1-esv-r8_b1"},{"introduced":"4.1-esv-r8_rc1"},{"last_affected":"4.1-esv-r8_rc1"},{"introduced":"4.1-esv-r9"},{"last_affected":"4.1-esv-r9"},{"introduced":"4.1-esv-r9_b1"},{"last_affected":"4.1-esv-r9_b1"},{"introduced":"4.1-esv-r9_rc1"},{"last_affected":"4.1-esv-r9_rc1"},{"introduced":"4.1.0"},{"last_affected":"4.1.0"}]}}],"versions":["4.1-esv-NA","4.1-esv-r1","4.1-esv-r10","4.1-esv-r10_b1","4.1-esv-r10_rc1","4.1-esv-r11","4.1-esv-r11_b1","4.1-esv-r11_rc1","4.1-esv-r11_rc2","4.1-esv-r12","4.1-esv-r12_b1","4.1-esv-r13","4.1-esv-r13_b1","4.1-esv-r14","4.1-esv-r14_b1","4.1-esv-r15","4.1-esv-r2","4.1-esv-r3","4.1-esv-r3_b1","4.1-esv-r4","4.1-esv-r5","4.1-esv-r5_b1","4.1-esv-r5_rc1","4.1-esv-r5_rc2","4.1-esv-r6","4.1-esv-r7","4.1-esv-r8","4.1-esv-r8_b1","4.1-esv-r8_rc1","4.1-esv-r9","4.1-esv-r9_b1","4.1-esv-r9_rc1","4.1.0","v4_3_6","v4_3_6b1","v4_3_5","v4_3_5b1","v4_3_4","v4_3_3","v4_3_3b1","v4_2_8","v4_3_2","v4_2_8_rc2","v4_3_2rc2","v4_2_8rc1","v4_3_2rc1","v4_2_8b1","v4_3_2b1","v4_3_2.pre-beta","v4_2_7","v4_3_1","v4_3_1rc1","v4_2_7rc1","v4_2_7b1","v4_3_1b1","v4_2_6","v4_3_0","v4_2_6rc1","v4_2_6b1","v4_2_5","v4_2_5rc1","v4_2_5b1","v4_2_4","v4_2_4rc2","v4_2_4rc1","v4_2_4b1","v4_2_3","v4_2_3rc1","v4_2_2","v4_2_2rc1","v4_2_2b1","v4_2_1_P1","v4_2_1","v4_2_1rc1","v4_2_1b1","v4_2_0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3144.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}