Skip to content
OpenAdvisories
Medium RHSA-2018:0158 1 CVE

Red Hat Security Advisory: dhcp security update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client dhclient 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::client dhcp 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::client dhcp-common 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::client dhcp-debuginfo 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::client dhcp-devel 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::client dhcp-libs 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::computenode dhclient 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp-common 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp-debuginfo 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp-devel 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp-libs 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::server dhclient 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::server dhcp 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::server dhcp-common 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::server dhcp-debuginfo 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::server dhcp-devel 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::server dhcp-libs 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::workstation dhclient 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp-common 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp-debuginfo 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp-devel 12:4.2.5-58.el7_4.1
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp-libs 12:4.2.5-58.el7_4.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2017-3144 EPSS 73%

    Failure to properly clean up closed OMAPI connections can exhaust available sockets

    A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions ma…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://kb.isc.org/article/AA-01541
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1522918
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0158.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-3144
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3144
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3144