Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence

CVE-2017-3144

High

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server.

Published Jan 16, 2019 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2017-3144, DSA-4133-1, SUSE-SU-2018:0444-1, SUSE-SU-2018:0532-1, UBUNTU-CVE-2017-3144

Key Facts

Patch immediately
  • CVE-2017-3144 is a high-severity vulnerability (CVSS 7.5 v3.1) affecting Dhcp (Isc), Ubuntu Linux (Canonical), Debian Linux and 15 more products.
  • It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
  • EPSS estimates a 73% probability of exploitation in the next 30 days.
  • Fixed versions are available, including dhclient 12:4.2.5-58.0.1.el7_4.1, dhclient 12:4.2.5-58.amzn2.1.2, Dhcp 12:4.2.5-58.0.1.el7_4.1.
  • Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS (30-day exploit likelihood)

73%

Higher than 99.4% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

None known

Get the full CVE-2017-3144 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

Affected Products

136 affected entries in total
ProductAffected versionsFixed in
DhcpIsc4.1.0, 4.1-esv, 4.1-esv-r1, 4.1-esv-r10, 4.1-esv-r10_b1, 4.1-esv-r10_rc1, 4.1-esv-r11, 4.1-esv-r11_b14.2.8
Ubuntu LinuxCanonical14.04, 16.04, 17.10n/a
Debian LinuxDebian8.0, 9.0n/a
Enterprise Linux DesktopRedhat7.0n/a
Enterprise Linux ServerRedhat7.0n/a
13 more affected products in the full CVE brief

Patched Releases

dhclient

12:4.2.5-58.0.1.el7_4.1, 12:4.2.5-58.amzn2.1.2

Dhcp

12:4.2.5-58.0.1.el7_4.1, 12:4.2.5-58.amzn2.1.2, 12:4.2.5-58.el7_4.1, 4.2.4.P2-0.28.5.3, 4.3.3-10.11.1, 4.3.3-11.3.1, 4.3.5-4.ph1, 4.3.5-5.ph2, 4.3.5-5.ph3, 4.4.2.P1-2.4

dhcp-client

4.2.4.P2-0.28.5.3, 4.3.3-10.11.1, 4.3.3-11.3.1, 4.4.2.P1-2.4

dhcp-common

12:4.2.5-58.0.1.el7_4.1, 12:4.2.5-58.amzn2.1.2

dhcp-devel

12:4.2.5-58.0.1.el7_4.1, 12:4.2.5-58.amzn2.1.2, 4.2.4.P2-0.28.5.3, 4.3.3-10.11.1, 4.3.3-11.3.1, 4.4.2.P1-2.4

dhcp-doc

4.3.3-11.3.1, 4.4.2.P1-2.4

dhcp-libs

12:4.2.5-58.0.1.el7_4.1, 12:4.2.5-58.amzn2.1.2

dhcp-relay

4.2.4.P2-0.28.5.3, 4.3.3-10.11.1, 4.3.3-11.3.1, 4.4.2.P1-2.4

dhcp-server

4.2.4.P2-0.28.5.3, 4.3.3-10.11.1, 4.3.3-11.3.1, 4.4.2.P1-2.4

ISC DHCP

<=4.2.8, 4.2.4-7ubuntu12.12, 4.3.1-6+deb8u3, 4.3.3-5ubuntu12.9, 4.3.5-3.1, 4.3.5-3+deb9u1, 4.3.5-3ubuntu5

Timeline

  1. Publicly disclosed

    Jan 16, 2019

  2. Last updated

    Aug 4, 2026

Weakness Type

  • CWE-400 Uncontrolled Resource Consumption
  • CWE-772 Missing Release of Resource after Effective Lifetime

References

15 more references in the full CVE brief

FAQ

Common Questions.

Is CVE-2017-3144 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo