[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2018-963 --- dhcp

ID: oval:org.secpod.oval:def:1700010Date: (C)2018-02-23   (M)2023-12-20
Class: PATCHFamily: unix




Omapi code doesn"t free socket descriptors when empty message is received allowing denial-of-serviceIt was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality.

Platform:
Amazon Linux 2
Product:
dhcp
Reference:
ALAS2-2018-963
CVE-2017-3144
CVE    1
CVE-2017-3144
CPE    81
cpe:/a:isc:dhcp:4.2.8:rc2
cpe:/a:isc:dhcp:4.2.8:rc1
cpe:/a:isc:dhcp:4.3.2:b1
cpe:/a:isc:dhcp:4.1-esv:r10_b1
...

© SecPod Technologies