CVE-2017-3144
Estado: ModificadaAlta (7.5)—
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 73%
- Percentil entre todas las CVEs puntuadas: 99
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (9)
CWE
- CWE-400
Referencias
- http://www.securityfocus.com/bid/102726
- http://www.securitytracker.com/id/1040194
- https://access.redhat.com/errata/RHSA-2018:0158
- https://kb.isc.org/docs/aa-01541
- https://usn.ubuntu.com/3586-1/
- https://www.debian.org/security/2018/dsa-4133
- http://www.securityfocus.com/bid/102726
- http://www.securitytracker.com/id/1040194
- https://access.redhat.com/errata/RHSA-2018:0158
- https://kb.isc.org/docs/aa-01541
- https://usn.ubuntu.com/3586-1/
- https://www.debian.org/security/2018/dsa-4133
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-3144",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "security-officer@isc.org",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security-officer@isc.org",
"affectedData": [
{
"vendor": "ISC",
"product": "ISC DHCP",
"versions": [
{
"status": "affected",
"version": "ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested."
}
]
}
]
}
],
"published": "2019-01-16T20:29:00.627",
"references": [
{
"url": "http://www.securityfocus.com/bid/102726",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "security-officer@isc.org"
},
{
"url": "http://www.securitytracker.com/id/1040194",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "security-officer@isc.org"
},
{
"url": "https://access.redhat.com/errata/RHSA-2018:0158",
"tags": [
"Third Party Advisory"
],
"source": "security-officer@isc.org"
},
{
"url": "https://kb.isc.org/docs/aa-01541",
"tags": [
"Vendor Advisory"
],
"source": "security-officer@isc.org"
},
{
"url": "https://usn.ubuntu.com/3586-1/",
"tags": [
"Third Party Advisory"
],
"source": "security-officer@isc.org"
},
{
"url": "https://www.debian.org/security/2018/dsa-4133",
"tags": [
"Third Party Advisory"
],
"source": "security-officer@isc.org"
},
{
"url": "http://www.securityfocus.com/bid/102726",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1040194",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2018:0158",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://kb.isc.org/docs/aa-01541",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://usn.ubuntu.com/3586-1/",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.debian.org/security/2018/dsa-4133",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested."
},
{
"lang": "es",
"value": "Una vulnerabilidad derivada del error al limpiar correctamente las conexiones OMAPI cerradas puede conducir al agotamiento del grupo de descriptores del socket disponibles para el servidor DHCP. Afecta a ISC DHCP desde la versión 4.1.0 hasta la 4.1-ESV-R15, desde la versión 4.2.0 hasta la 4.2.8 y desde la versión 4.3.0 hasta la 4.3.6. Las versiones anteriores podrían hacerse visto afectadas, pero han sobrepasado por mucho su fin de vida útil. Las versiones anteriores a la 4.1.0 no han sido probadas."
}
],
"lastModified": "2026-06-17T01:17:36.890",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B88B6F8-3F13-4984-BBCF-F79BE911F15D",
"versionEndIncluding": "4.2.8",
"versionStartIncluding": "4.2.0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADAC6E78-8F98-42C3-BE19-276826F84752",
"versionEndIncluding": "4.3.6",
"versionStartIncluding": "4.3.0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F27D0660-2F07-430B-A651-5D0B6AA763C0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBAABA4E-0D34-4644-AC26-E272CEE6C361"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "179443DC-4B6A-408A-8BE5-B3E72188F43E"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9BE7736-58CD-468B-84AB-B38C9B254BA6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EB6F7F0-B2A0-47E3-AD7A-4E7618A36F90"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADF80D19-3B0A-4A74-944E-F33CCC30EADA"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40B21FCB-43A8-4266-934D-ECFF8138F637"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69D49F23-9074-49E7-985F-4D93393324CD"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F729D1D-7234-4BC2-839B-AE1BB9D16C25"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBA64EEC-C0C7-4F11-8131-2868691E54DB"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "157520D7-AE39-4E23-A8CF-DD75EA78C055"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B07118EC-9508-42B8-8D09-5CE310DA2B43"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A157E664-6ACE-44CE-AC07-64898B182EA1"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0056BF7A-4A70-4F1D-89C2-25CCDB65217B"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D21F05D-246F-41F5-81FD-286C26168E2E"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12103C87-C942-481A-A68C-7BC83F964C06"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "924E91FF-495F-4963-827F-57F7340C6560"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5E2FFC7-6E73-463E-846C-C403E41A2022"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9D08285-745D-40AB-9A78-F467712CDA5A"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D115F1F-1A3A-4924-AF10-723B3BB0CBB9"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79F235F0-AD16-4E5B-AB60-97F0BB86AEB6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E84D5E5B-0336-4166-AAAC-49375E3AF971"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09561C97-563C-4DDC-9EE4-E83EFFD467D6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "519CF0CC-FB12-4C68-88A0-E0E15738C620"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80EB131E-32E5-458F-8DDA-48835D2D883F"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65E0296F-3522-4B43-AF34-CFE1AE7EEC1E"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69F6E619-A52B-4A60-8247-41ADD0E7D655"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA48EBAA-10B7-43D6-9A27-99F2578DF7F6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20040BB3-F157-4505-BB60-0D919A7D1436"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "974A8587-8351-490A-82D9-B541862CA4C7"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DABD43E-818A-4B21-B4E7-753056D4A184"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE991D0E-2E2D-4844-9BBD-235D8BC5FB7A"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "975EF88C-988F-40A6-B7D1-D27439144CC2"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41B46352-9D4D-4C74-876F-3685016025CC"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D99A687E-EAE6-417E-A88E-D0082BC194CD"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9070C9D8-A14A-467F-8253-33B966C16886"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security-officer@isc.org"
}