A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade dhcp-develUpgrade dhclientUpgrade dhcp-libsUpgrade dhcp-commonUpgrade dhcpUpgrade dhcp-debuginfo | Apr 27, 2020 | Jan 16, 2019 |
| Centos_linux | — | Upgrade dhclientUpgrade dhcp-commonUpgrade dhcp-libsUpgrade dhcp-develUpgrade dhcpUpgrade dhcp-debuginfo | Jan 27, 2018 | Jan 25, 2018 |
| Debian | — | Upgrade isc-dhcp | Mar 9, 2018 | Jan 25, 2018 |
| Gentoo Linux | — | Upgrade net-misc/dhcp. | Apr 9, 2018 | Apr 8, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade dhcp-commonUpgrade dhcpUpgrade dhcp-libs | Feb 13, 2018 | Dec 7, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade dhcp-commonUpgrade dhcp-libsUpgrade dhcp | Feb 13, 2018 | Dec 7, 2017 |
| Oracle Solaris | — | Upgrade service/network/dhcp/isc-dhcp to version 4.3.6.0.1-0.175.3.30.0.4.0 on Solaris 11.3 | Mar 21, 2018 | Mar 21, 2018 |
| Oracle_linux | — | Upgrade dhclientUpgrade dhcpUpgrade dhcp-libsUpgrade dhcp-commonUpgrade dhcp-devel | Jan 27, 2018 | Dec 7, 2017 |
| Redhat_linux | — | Upgrade dhclientUpgrade dhcp-debuginfoUpgrade dhcp-develUpgrade dhcpUpgrade dhcp-libsUpgrade dhcp-common | Jan 26, 2018 | Jan 25, 2018 |
| Suse | — | Upgrade dhcp-serverUpgrade dhcp-relayUpgrade dhcp-develUpgrade dhcpUpgrade dhcp-client | Feb 16, 2018 | Jan 25, 2018 |
| Ubuntu | — | Upgrade isc-dhcp-serverUpgrade isc-dhcp-server-ldapUpgrade isc-dhcp-clientUpgrade isc-dhcp-relay | Mar 2, 2018 | Jan 25, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 16, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub