Skip to content
Fencer Intel
medium 5.3

CVE-2017-3144 json

Failure to properly clean up closed OMAPI connections can exhaust available sockets

published 2019-01-16 7 y ago modified 2026-06-17 4 mo ago also EUVD-2017-12285

cvss
5.3
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
72.7%
EPSS 72.7% chance of exploitation in 30 days, percentile 99.4%
public exploits
0
none known

Summary

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

Patch / fix

  • isc-dhcp Debian 13, Debian 12 4.3.5-3.1

debian advisories DEBIAN-CVE-2017-3144

  • isc-dhcp Ubuntu 14.04 LTS 4.2.4-7ubuntu12.12
  • isc-dhcp Ubuntu 16.04 LTS 4.3.3-5ubuntu12.9
  • isc-dhcp Ubuntu 18.04 LTS 4.3.5-3ubuntu5

ubuntu advisories UBUNTU-CVE-2017-3144

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • dhcp RHEL 7 12:4.2.5-58.el7_4.1
  • dhclient RHEL 7 12:4.2.5-58.el7_4.1
  • dhcp-libs RHEL 7 12:4.2.5-58.el7_4.1
  • dhcp-common RHEL 7 12:4.2.5-58.el7_4.1

red hat advisories RHSA-2018:0158

  • dhcp SLES for SAP 12 SP3, SLES for SAP 12 SP2, SLES for Raspberry Pi 12 SP2 +6 more 4.3.3-10.11.1
  • dhcp SLES for SAP 11 SP4, SLES 11 SP4, SLE Software Development Kit 11 SP4 4.2.4.P2-0.28.5.3

suse advisories SUSE-SU-2018:0532-1SUSE-SU-2018:0444-1

  • dhcp openSUSE Tumbleweed 4.4.2.P1-2.4

opensuse advisories openSUSE-SU-2024:10715-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-3144 updated cvss 5.3

dhcp: omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service

  • Red Hat Enterprise Linux Client (v. 7) dhcp 4.2.5-58.el7_4.1, dhclient 4.2.5-58.el7_4.1, dhcp-libs 4.2.5-58.el7_4.1, dhcp-common 4.2.5-58.el7_4.1 Red Hat Enterprise Linux Client Optional (v. 7) dhcp 4.2.5-58.el7_4.1 Red Hat Enterprise Linux ComputeNode (v. 7) dhcp 4.2.5-58.el7_4.1, dhclient 4.2.5-58.el7_4.1, dhcp-libs 4.2.5-58.el7_4.1, dhcp-common 4.2.5-58.el7_4.1 Red Hat Enterprise Linux ComputeNode Optional (v. 7) dhcp 4.2.5-58.el7_4.1 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) dhcp 4.2.5-58.el7_4.1, dhclient 4.2.5-58.el7_4.1, dhcp-libs 4.2.5-58.el7_4.1, dhcp-common 4.2.5-58.el7_4.1 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) dhcp-devel 4.2.5-58.el7_4.1, dhcp-debuginfo 4.2.5-58.el7_4.1
    +4 more products
    Red Hat Enterprise Linux Server (v. 7) dhcp 4.2.5-58.el7_4.1, dhclient 4.2.5-58.el7_4.1, dhcp-libs 4.2.5-58.el7_4.1, dhcp-common 4.2.5-58.el7_4.1 Red Hat Enterprise Linux Server Optional (v. 7) dhcp-devel 4.2.5-58.el7_4.1, dhcp-debuginfo 4.2.5-58.el7_4.1 Red Hat Enterprise Linux Workstation (v. 7) dhcp 4.2.5-58.el7_4.1, dhclient 4.2.5-58.el7_4.1, dhcp-libs 4.2.5-58.el7_4.1, dhcp-common 4.2.5-58.el7_4.1 Red Hat Enterprise Linux Workstation Optional (v. 7) dhcp-devel 4.2.5-58.el7_4.1, dhcp-debuginfo 4.2.5-58.el7_4.1
    fixed: vendor fix RHSA-2018:0158
  • Red Hat Enterprise Linux 5 dhcp Red Hat Enterprise Linux 6 dhcp, dhclient, dhcp-common
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

72.72% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.0 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • ISC ISC DHCP

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.