High
Security advisory
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-3144
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 08:05 UTC · Revision 1
Source evidence
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
osv:CVE-2017-3144
Complete source record
{
"id": "f4927192c9f05eb564d2cf9b12a1ed881943883bbcc13049ab7a47e8b00de32e",
"url": "https://osv.dev/vulnerability/CVE-2017-3144",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-3144",
"summary": "A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.",
"evidence": "osv:CVE-2017-3144",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-3144",
"aliases": [
"CVE-2017-3144"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://gitlab.isc.org/isc-projects/dhcp",
"type": "GIT",
"events": [
{
"introduced": "079f747eb20d40e80c65e8a984d6c50860560b3c"
},
{
"last_affected": "8541c4fcbc6364800775234bacfe646ef16bfd38"
},
{
"introduced": "5de62c8b34a94e66269b39c663cd222047216306"
},
{
"last_affected": "c1bd79a15e9b689e8a18538aaedec0ab8bd04b17"
},
{
"introduced": "b39dd193dc3d189d3669866d73a87172545e2a4b"
},
{
"last_affected": "2a4ff20abc29fe2647de68e6a6eea8e49e6ce941"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.2.0"
},
{
"last_affected": "4.2.8"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.3.0"
},
{
"last_affected": "4.3.6"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-NA"
},
{
"last_affected": "4.1-esv-NA"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r1"
},
{
"last_affected": "4.1-esv-r1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r10"
},
{
"last_affected": "4.1-esv-r10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r10_b1"
},
{
"last_affected": "4.1-esv-r10_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r10_rc1"
},
{
"last_affected": "4.1-esv-r10_rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r11"
},
{
"last_affected": "4.1-esv-r11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r11_b1"
},
{
"last_affected": "4.1-esv-r11_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r11_rc1"
},
{
"last_affected": "4.1-esv-r11_rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r11_rc2"
},
{
"last_affected": "4.1-esv-r11_rc2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r12"
},
{
"last_affected": "4.1-esv-r12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r12_b1"
},
{
"last_affected": "4.1-esv-r12_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r12_p1"
},
{
"last_affected": "4.1-esv-r12_p1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r13"
},
{
"last_affected": "4.1-esv-r13"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r13_b1"
},
{
"last_affected": "4.1-esv-r13_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r14"
},
{
"last_affected": "4.1-esv-r14"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r14_b1"
},
{
"last_affected": "4.1-esv-r14_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r15"
},
{
"last_affected": "4.1-esv-r15"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r2"
},
{
"last_affected": "4.1-esv-r2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r3"
},
{
"last_affected": "4.1-esv-r3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r3_b1"
},
{
"last_affected": "4.1-esv-r3_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r4"
},
{
"last_affected": "4.1-esv-r4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r5"
},
{
"last_affected": "4.1-esv-r5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r5_b1"
},
{
"last_affected": "4.1-esv-r5_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r5_rc1"
},
{
"last_affected": "4.1-esv-r5_rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r5_rc2"
},
{
"last_affected": "4.1-esv-r5_rc2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r6"
},
{
"last_affected": "4.1-esv-r6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r7"
},
{
"last_affected": "4.1-esv-r7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r8"
},
{
"last_affected": "4.1-esv-r8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r8_b1"
},
{
"last_affected": "4.1-esv-r8_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r8_rc1"
},
{
"last_affected": "4.1-esv-r8_rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r9"
},
{
"last_affected": "4.1-esv-r9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r9_b1"
},
{
"last_affected": "4.1-esv-r9_b1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1-esv-r9_rc1"
},
{
"last_affected": "4.1-esv-r9_rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.1.0"
},
{
"last_affected": "4.1.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"4.1-esv-NA",
"4.1-esv-r1",
"4.1-esv-r10",
"4.1-esv-r10_b1",
"4.1-esv-r10_rc1",
"4.1-esv-r11",
"4.1-esv-r11_b1",
"4.1-esv-r11_rc1",
"4.1-esv-r11_rc2",
"4.1-esv-r12",
"4.1-esv-r12_b1",
"4.1-esv-r13",
"4.1-esv-r13_b1",
"4.1-esv-r14",
"4.1-esv-r14_b1",
"4.1-esv-r15",
"4.1-esv-r2",
"4.1-esv-r3",
"4.1-esv-r3_b1",
"4.1-esv-r4",
"4.1-esv-r5",
"4.1-esv-r5_b1",
"4.1-esv-r5_rc1",
"4.1-esv-r5_rc2",
"4.1-esv-r6",
"4.1-esv-r7",
"4.1-esv-r8",
"4.1-esv-r8_b1",
"4.1-esv-r8_rc1",
"4.1-esv-r9",
"4.1-esv-r9_b1",
"4.1-esv-r9_rc1",
"4.1.0",
"v4_3_6",
"v4_3_6b1",
"v4_3_5",
"v4_3_5b1",
"v4_3_4",
"v4_3_3",
"v4_3_3b1",
"v4_2_8",
"v4_3_2",
"v4_2_8_rc2",
"v4_3_2rc2",
"v4_2_8rc1",
"v4_3_2rc1",
"v4_2_8b1",
"v4_3_2b1",
"v4_3_2.pre-beta",
"v4_2_7",
"v4_3_1",
"v4_3_1rc1",
"v4_2_7rc1",
"v4_2_7b1",
"v4_3_1b1",
"v4_2_6",
"v4_3_0",
"v4_2_6rc1",
"v4_2_6b1",
"v4_2_5",
"v4_2_5rc1",
"v4_2_5b1",
"v4_2_4",
"v4_2_4rc2",
"v4_2_4rc1",
"v4_2_4b1",
"v4_2_3",
"v4_2_3rc1",
"v4_2_2",
"v4_2_2rc1",
"v4_2_2b1",
"v4_2_1_P1",
"v4_2_1",
"v4_2_1rc1",
"v4_2_1b1",
"v4_2_0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3144.json"
}
}
],
"modified": "2026-10-24T10:31:02.726804272Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2018:0158",
"https://kb.isc.org/docs/aa-01541",
"https://usn.ubuntu.com/3586-1/",
"https://www.debian.org/security/2018/dsa-4133"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "14.04"
},
{
"last_affected": "14.04"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "17.10"
},
{
"last_affected": "17.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"range": [
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_eus",
"extracted_events": [
{
"range": [
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.5"
},
{
"last_affected": "7.5"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_tus",
"extracted_events": [
{
"range": [
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-3144",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 440082,
"published_at": "2019-01-16T20:29:00.627+00:00"
}