CVE-2017-3144

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.

• CWE-400

• http://www.securityfocus.com/bid/102726Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040194Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2018:0158Third Party Advisory
• https://kb.isc.org/docs/aa-01541Vendor Advisory
• https://usn.ubuntu.com/3586-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4133Third Party Advisory
• http://www.securityfocus.com/bid/102726Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040194Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2018:0158Third Party Advisory
• https://kb.isc.org/docs/aa-01541Vendor Advisory
• https://usn.ubuntu.com/3586-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4133Third Party Advisory

Published

Jan 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3138named contains a feature which allows operators to issue com…6.5
• CVE-2017-3139A denial of service flaw was found in the way BIND handled D…7.5
• CVE-2017-3140If named is configured to use Response Policy Zones (RPZ) an…3.7
• CVE-2017-3141The BIND installer on Windows uses an unquoted service path …7.2
• CVE-2017-3142An attacker who is able to send and receive messages to an a…5.3
• CVE-2017-3143An attacker who is able to send and receive messages to an a…7.5
• CVE-2017-3145BIND was improperly sequencing cleanup operations on upstrea…7.5
• CVE-2017-3146Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2017-3147Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2017-3148Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2017-3149Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2017-3150Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating …