A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
{
"unresolved_ranges": [
{
"source": "CPE_STRING",
"vendor_product": "canonical:ubuntu_linux",
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "14.04"
},
{
"last_affected": "14.04"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "17.10"
},
{
"last_affected": "17.10"
}
]
},
{
"source": "CPE_STRING",
"vendor_product": "debian:debian_linux",
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
]
},
{
"source": "CPE_STRING",
"vendor_product": "redhat:enterprise_linux_desktop",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
]
},
{
"source": "CPE_STRING",
"vendor_product": "redhat:enterprise_linux_server",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
]
},
{
"vendor_product": "redhat:enterprise_linux_server_aus",
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
]
},
{
"source": "CPE_STRING",
"vendor_product": "redhat:enterprise_linux_server_eus",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.5"
},
{
"last_affected": "7.5"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
]
},
{
"vendor_product": "redhat:enterprise_linux_server_tus",
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
]
},
{
"source": "CPE_STRING",
"vendor_product": "redhat:enterprise_linux_workstation",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
]
}
]
}{
"source": [
"CPE_RANGE",
"CPE_STRING"
],
"extracted_events": [
{
"introduced": "4.2.0"
},
{
"last_affected": "4.2.8"
},
{
"introduced": "4.3.0"
},
{
"last_affected": "4.3.6"
},
{
"introduced": "4.1-esv-NA"
},
{
"last_affected": "4.1-esv-NA"
},
{
"introduced": "4.1-esv-r1"
},
{
"last_affected": "4.1-esv-r1"
},
{
"introduced": "4.1-esv-r10"
},
{
"last_affected": "4.1-esv-r10"
},
{
"introduced": "4.1-esv-r10_b1"
},
{
"last_affected": "4.1-esv-r10_b1"
},
{
"introduced": "4.1-esv-r10_rc1"
},
{
"last_affected": "4.1-esv-r10_rc1"
},
{
"introduced": "4.1-esv-r11"
},
{
"last_affected": "4.1-esv-r11"
},
{
"introduced": "4.1-esv-r11_b1"
},
{
"last_affected": "4.1-esv-r11_b1"
},
{
"introduced": "4.1-esv-r11_rc1"
},
{
"last_affected": "4.1-esv-r11_rc1"
},
{
"introduced": "4.1-esv-r11_rc2"
},
{
"last_affected": "4.1-esv-r11_rc2"
},
{
"introduced": "4.1-esv-r12"
},
{
"last_affected": "4.1-esv-r12"
},
{
"introduced": "4.1-esv-r12_b1"
},
{
"last_affected": "4.1-esv-r12_b1"
},
{
"introduced": "4.1-esv-r12_p1"
},
{
"last_affected": "4.1-esv-r12_p1"
},
{
"introduced": "4.1-esv-r13"
},
{
"last_affected": "4.1-esv-r13"
},
{
"introduced": "4.1-esv-r13_b1"
},
{
"last_affected": "4.1-esv-r13_b1"
},
{
"introduced": "4.1-esv-r14"
},
{
"last_affected": "4.1-esv-r14"
},
{
"introduced": "4.1-esv-r14_b1"
},
{
"last_affected": "4.1-esv-r14_b1"
},
{
"introduced": "4.1-esv-r15"
},
{
"last_affected": "4.1-esv-r15"
},
{
"introduced": "4.1-esv-r2"
},
{
"last_affected": "4.1-esv-r2"
},
{
"introduced": "4.1-esv-r3"
},
{
"last_affected": "4.1-esv-r3"
},
{
"introduced": "4.1-esv-r3_b1"
},
{
"last_affected": "4.1-esv-r3_b1"
},
{
"introduced": "4.1-esv-r4"
},
{
"last_affected": "4.1-esv-r4"
},
{
"introduced": "4.1-esv-r5"
},
{
"last_affected": "4.1-esv-r5"
},
{
"introduced": "4.1-esv-r5_b1"
},
{
"last_affected": "4.1-esv-r5_b1"
},
{
"introduced": "4.1-esv-r5_rc1"
},
{
"last_affected": "4.1-esv-r5_rc1"
},
{
"introduced": "4.1-esv-r5_rc2"
},
{
"last_affected": "4.1-esv-r5_rc2"
},
{
"introduced": "4.1-esv-r6"
},
{
"last_affected": "4.1-esv-r6"
},
{
"introduced": "4.1-esv-r7"
},
{
"last_affected": "4.1-esv-r7"
},
{
"introduced": "4.1-esv-r8"
},
{
"last_affected": "4.1-esv-r8"
},
{
"introduced": "4.1-esv-r8_b1"
},
{
"last_affected": "4.1-esv-r8_b1"
},
{
"introduced": "4.1-esv-r8_rc1"
},
{
"last_affected": "4.1-esv-r8_rc1"
},
{
"introduced": "4.1-esv-r9"
},
{
"last_affected": "4.1-esv-r9"
},
{
"introduced": "4.1-esv-r9_b1"
},
{
"last_affected": "4.1-esv-r9_b1"
},
{
"introduced": "4.1-esv-r9_rc1"
},
{
"last_affected": "4.1-esv-r9_rc1"
},
{
"introduced": "4.1.0"
},
{
"last_affected": "4.1.0"
}
],
"cpe": [
"cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*",
"cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*"
]
}