Skip to content
OpenAdvisories
Medium ELSA-2018-0158 1 CVE

Moderate: dhcp security update (Oracle Linux 7)

Published Jan 25, 2018 · Updated Jan 25, 2018

Ecosystem: Oracle Linux

Summary

[12:4.2.5-58.0.1.1]
- Added oracle-errwarn-message.patch

[12:4.2.5-58.1]
- Resolves: #1523475 - Fix omapi socket descriptors leak

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 dhclient 12:4.2.5-58.0.1.el7_4.1
Oracle Linux · 7 dhcp 12:4.2.5-58.0.1.el7_4.1
Oracle Linux · 7 dhcp-common 12:4.2.5-58.0.1.el7_4.1
Oracle Linux · 7 dhcp-devel 12:4.2.5-58.0.1.el7_4.1
Oracle Linux · 7 dhcp-libs 12:4.2.5-58.0.1.el7_4.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2017-3144 EPSS 73%

    Failure to properly clean up closed OMAPI connections can exhaust available sockets

    A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions ma…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu