PublicDateAtUSN: 2017-12-31
Candidate: CVE-2017-3144
PublicDate: 2019-01-16 20:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3144
 https://kb.isc.org/article/AA-01541
 https://ubuntu.com/security/notices/USN-3586-1
Description:
 A vulnerability stemming from failure to properly clean up closed OMAPI
 connections can lead to exhaustion of the pool of socket descriptors
 available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0
 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well
 beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been
 tested.
Ubuntu-Description:
Notes:
 mdeslaur> DoS over OMAPI port only, see ISC kb article
 mdeslaur> for workarounds, or properly limit access to ports
Bugs:
 https://bugzilla.redhat.com/show_bug.cgi?id=1522918
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887413
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]


Patches_isc-dhcp:
 upstream: https://source.isc.org/cgi-bin/gitweb.cgi?p=dhcp.git;a=commit;h=1a6b62fe17a42b00fa234d06b6dfde3d03451894
upstream_isc-dhcp: needs-triage
precise/esm_isc-dhcp: ignored (end of ESM support, was needs-triage)
trusty_isc-dhcp: released (4.2.4-7ubuntu12.12)
trusty/esm_isc-dhcp: released (4.2.4-7ubuntu12.12)
xenial_isc-dhcp: released (4.3.3-5ubuntu12.9)
esm-infra/xenial_isc-dhcp: released (4.3.3-5ubuntu12.9)
artful_isc-dhcp: released (4.3.5-3ubuntu2.2)
bionic_isc-dhcp: released (4.3.5-3ubuntu5)
cosmic_isc-dhcp: released (4.3.5-3ubuntu5)
disco_isc-dhcp: released (4.3.5-3ubuntu5)
eoan_isc-dhcp: released (4.3.5-3ubuntu5)
focal_isc-dhcp: released (4.3.5-3ubuntu5)
groovy_isc-dhcp: released (4.3.5-3ubuntu5)
hirsute_isc-dhcp: released (4.3.5-3ubuntu5)
devel_isc-dhcp: released (4.3.5-3ubuntu5)