CVE-2017-3144 Failure to properly clean up closed OMAPI connections can exhaust available sockets

🗓️ 16 Jan 2019 20:00:00Reported by iscType

Vulnerability in OMAPI connection cleanup leading to socket exhaustio

Reporter	Title	Published	Views	Family All 72
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in dhcp	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in DHCP affects PowerKVM	18 Jun 201801:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in dhcp (CVE-2017-3144)	26 Jul 201820:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerabilty in dhcp (CVE-2017-3144)	7 Dec 202322:31	–	ibm
Tenable Nessus	Amazon Linux 2 : dhcp (ALAS-2018-963)	18 Apr 201800:00	–	nessus
Tenable Nessus	CentOS 7 : dhcp (CESA-2018:0158)	26 Jan 201800:00	–	nessus
Tenable Nessus	Debian DSA-4133-1 : isc-dhcp - security update	8 Mar 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : dhcp (EulerOS-SA-2018-1035)	13 Feb 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : dhcp (EulerOS-SA-2018-1036)	13 Feb 201800:00	–	nessus

[
  {
    "product": "ISC DHCP",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6.  Older versions may also be affected but are well beyond their end-of-life (EOL).  Releases prior to 4.1.0 have not been tested."
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1040194
access	www.access.redhat.com/errata/RHSA-2018:0158
kb	www.kb.isc.org/docs/aa-01541
debian	www.debian.org/security/2018/dsa-4133
usn	www.usn.ubuntu.com/3586-1/
securityfocus	www.securityfocus.com/bid/102726

17 Jan 2019 10:57Current

7.5High risk

Vulners AI Score7.5

CVSS 35.3

EPSS0.11782