A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-dhclientamazon-linux-ami-2-upgrade-dhcpamazon-linux-ami-2-upgrade-dhcp-commonamazon-linux-ami-2-upgrade-dhcp-debuginfoamazon-linux-ami-2-upgrade-dhcp-develamazon-linux-ami-2-upgrade-dhcp-libs | Apr 27, 2020 | Jan 16, 2019 | |
| Centos_linux | — | centos-upgrade-dhclientcentos-upgrade-dhcpcentos-upgrade-dhcp-commoncentos-upgrade-dhcp-debuginfocentos-upgrade-dhcp-develcentos-upgrade-dhcp-libs | Jan 27, 2018 | Jan 25, 2018 |
| Debian | debian-upgrade-isc-dhcp | Mar 9, 2018 | Jan 25, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-dhcp | Apr 9, 2018 | Apr 8, 2018 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-dhcphuawei-euleros-2_0_sp1-upgrade-dhcp-commonhuawei-euleros-2_0_sp1-upgrade-dhcp-libs | Feb 13, 2018 | Dec 7, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-dhcphuawei-euleros-2_0_sp2-upgrade-dhcp-commonhuawei-euleros-2_0_sp2-upgrade-dhcp-libs | Feb 13, 2018 | Dec 7, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-service-network-dhcp-isc-dhcp-4-3-6-0-1-0-175-3-30-0-4-0 | Mar 21, 2018 | Mar 21, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-dhclientoracle-linux-upgrade-dhcporacle-linux-upgrade-dhcp-commonoracle-linux-upgrade-dhcp-develoracle-linux-upgrade-dhcp-libs | Jan 27, 2018 | Dec 7, 2017 |
| Redhat_linux | — | redhat-upgrade-dhclientredhat-upgrade-dhcpredhat-upgrade-dhcp-commonredhat-upgrade-dhcp-debuginforedhat-upgrade-dhcp-develredhat-upgrade-dhcp-libs | Jan 26, 2018 | Jan 25, 2018 |
| Suse | — | suse-upgrade-dhcpsuse-upgrade-dhcp-clientsuse-upgrade-dhcp-develsuse-upgrade-dhcp-relaysuse-upgrade-dhcp-server | Feb 16, 2018 | Jan 25, 2018 |
| Ubuntu | ubuntu-upgrade-isc-dhcp-clientubuntu-upgrade-isc-dhcp-relayubuntu-upgrade-isc-dhcp-serverubuntu-upgrade-isc-dhcp-server-ldap | Mar 2, 2018 | Jan 25, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub