A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade dhcp-develUpgrade dhcp-commonUpgrade dhcp-libsUpgrade dhcpUpgrade dhclientUpgrade dhcp-debuginfo | Apr 27, 2020 | Jan 16, 2019 |
| Centos_linux | — | Upgrade dhcp-develUpgrade dhclientUpgrade dhcp-libsUpgrade dhcp-commonUpgrade dhcpUpgrade dhcp-debuginfo | Jan 27, 2018 | Jan 25, 2018 |
| Debian | — | Upgrade isc-dhcp | Mar 9, 2018 | Jan 25, 2018 |
| Gentoo Linux | — | Upgrade net-misc/dhcp. | Apr 9, 2018 | Apr 8, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade dhcp-commonUpgrade dhcpUpgrade dhcp-libs | Feb 13, 2018 | Dec 7, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade dhcpUpgrade dhcp-libsUpgrade dhcp-common | Feb 13, 2018 | Dec 7, 2017 |
| Oracle Solaris | — | Upgrade service/network/dhcp/isc-dhcp to version 4.3.6.0.1-0.175.3.30.0.4.0 on Solaris 11.3 | Mar 21, 2018 | Mar 21, 2018 |
| Oracle_linux | — | Upgrade dhcpUpgrade dhclientUpgrade dhcp-libsUpgrade dhcp-develUpgrade dhcp-common | Jan 27, 2018 | Dec 7, 2017 |
| Redhat_linux | — | Upgrade dhcp-debuginfoUpgrade dhclientUpgrade dhcp-libsUpgrade dhcpUpgrade dhcp-develUpgrade dhcp-common | Jan 26, 2018 | Jan 25, 2018 |
| Suse | — | Upgrade dhcp-clientUpgrade dhcp-develUpgrade dhcp-relayUpgrade dhcp-serverUpgrade dhcp | Feb 16, 2018 | Jan 25, 2018 |
| Ubuntu | — | Upgrade isc-dhcp-serverUpgrade isc-dhcp-relayUpgrade isc-dhcp-server-ldapUpgrade isc-dhcp-client | Mar 2, 2018 | Jan 25, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub