A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade dhcp-develUpgrade dhcp-debuginfoUpgrade dhcp-libsUpgrade dhcpUpgrade dhcp-commonUpgrade dhclient | Apr 27, 2020 | Jan 16, 2019 |
| Centos_linux | — | Upgrade dhcp-debuginfoUpgrade dhcpUpgrade dhcp-commonUpgrade dhcp-libsUpgrade dhclientUpgrade dhcp-devel | Jan 27, 2018 | Jan 25, 2018 |
| Debian | — | Upgrade isc-dhcp | Mar 9, 2018 | Jan 25, 2018 |
| Gentoo Linux | — | Upgrade net-misc/dhcp. | Apr 9, 2018 | Apr 8, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade dhcp-libsUpgrade dhcp-commonUpgrade dhcp | Feb 13, 2018 | Dec 7, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade dhcpUpgrade dhcp-libsUpgrade dhcp-common | Feb 13, 2018 | Dec 7, 2017 |
| Oracle Solaris | — | Upgrade service/network/dhcp/isc-dhcp to version 4.3.6.0.1-0.175.3.30.0.4.0 on Solaris 11.3 | Mar 21, 2018 | Mar 21, 2018 |
| Oracle_linux | — | Upgrade dhcp-commonUpgrade dhclientUpgrade dhcpUpgrade dhcp-libsUpgrade dhcp-devel | Jan 27, 2018 | Dec 7, 2017 |
| Redhat_linux | — | Upgrade dhclientUpgrade dhcp-debuginfoUpgrade dhcp-develUpgrade dhcp-libsUpgrade dhcp-commonUpgrade dhcp | Jan 26, 2018 | Jan 25, 2018 |
| Suse | — | Upgrade dhcp-relayUpgrade dhcp-develUpgrade dhcp-clientUpgrade dhcp-serverUpgrade dhcp | Feb 16, 2018 | Jan 25, 2018 |
| Ubuntu | — | Upgrade isc-dhcp-relayUpgrade isc-dhcp-server-ldapUpgrade isc-dhcp-clientUpgrade isc-dhcp-server | Mar 2, 2018 | Jan 25, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 16, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub