{"id":"CVE-2017-3144","published":"2019-01-16T20:00:00Z","modified":"2024-09-16T22:46:13Z","title":"Failure to properly clean up closed OMAPI connections can exhaust available sockets","vendor":"ISC","product":"ISC DHCP","tier":"core","eol":null,"affectedVersions":[{"vendor":"ISC","product":"ISC DHCP","versions":["ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6.  Older versions may also be affected but are well beyond their end-of-life (EOL).  Releases prior to 4.1.0 have not been tested."]}],"description":{"text":"A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in ISC DHCP's handling of OMAPI connections, where closed connections are not properly cleaned up, allowing the server's pool of available socket descriptors to be exhausted. The affected versions are 4.1.0 through 4.1-ESV-R15, 4.2.0 through 4.2.8, and 4.3.0 through 4.3.6, with older releases possibly affected but untested and beyond end-of-life. An attacker with network access to the DHCP server can exhaust its socket descriptors to degrade availability, requiring no authentication or user interaction and no particular non-default configuration.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:22:34Z"},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.72724,"percentile":0.99445,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:0158","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.debian.org/security/2018/dsa-4133","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.securityfocus.com/bid/102726","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1040194","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://usn.ubuntu.com/3586-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://kb.isc.org/docs/aa-01541","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-12285","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-12285","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2019-01-16","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-3144","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":23.6,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.89,"detail":"percentile 0.9944"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":3.71,"detail":"base score 5.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}