← Back to browse · API

CVE-2017-3144

Severity
MEDIUM
CVSS
5.3
EPSS
0.72724
Risk score
46.65
CISA KEV
No
PoC
No
Published
2019-01-16
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2017-12285, GHSA-4WQW-H6W8-F8QG
Products
ISC:ISC DHCP ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
Sources
euvd EUVD-2017-12285

Description

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

References