This update for dhcp fixes several issues.

This security issue was fixed :

  - CVE-2017-3144: OMAPI code didn't free socket descriptors     when empty message is received allowing DoS     (bsc#1076119).

These non-security issues were fixed :

  - Optimized if and when DNS client context and ports are     initted (bsc#1073935)

  - Relax permission of dhclient-script for libguestfs     (bsc#987170)

  - Modify dhclient-script to handle static route updates     (bsc#1023415).

  - Use only the 12 least significant bits of an inbound     packet's TCI value as the VLAN ID to fix some packages     being wrongly discarded by the Linux packet filter.
    (bsc#1059061)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

According to the version of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality. (CVE-2017-3144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has dhcp packages installed that are affected by multiple vulnerabilities:

  - It was found that the DHCP daemon did not properly clean     up closed OMAPI connections in certain cases. A remote     attacker able to connect to the OMAPI port could use     this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality. (CVE-2017-3144)

  - A command injection flaw was found in the NetworkManager     integration script included in the DHCP client packages     in Red Hat Enterprise Linux. A malicious DHCP server, or     an attacker on the local network able to spoof DHCP     responses, could use this flaw to execute arbitrary     commands with root privileges on systems using     NetworkManager and configured to obtain network     configuration using the DHCP protocol. (CVE-2018-1111)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-2570:01 advisory.

    * It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the     DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144)     CVE-2017-3144
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0158 advisory.

    The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP     network to get their own network configuration information, including an IP address, a subnet mask, and a     broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and     administer DHCP on a network.

    Security Fix(es):

    * It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the     DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality. (CVE-2017-3144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the dhcp package has been released.

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x     before 4.3.3-P1 allows remote attackers to cause a     denial of service (application crash) via an invalid     length field in a UDP IPv4 packet.(CVE-2015-8605)

  - A denial of service flaw was found in the way dhcpd     handled reference counting when processing client     requests. A malicious DHCP client could use this flaw     to trigger a reference count overflow on the server     side, potentially causing dhcpd to crash, by sending     large amounts of traffic.(CVE-2018-5733)

  - An out-of-bound memory access flaw was found in the way     dhclient processed a DHCP response packet. A malicious     DHCP server could potentially use this flaw to crash     dhclient processes running on DHCP client machines via     a crafted DHCP response packet.(CVE-2018-5732)

  - A resource-consumption flaw was discovered in the DHCP     server. dhcpd did not restrict the number of open     connections to OMAPI and failover ports. A remote     attacker able to establish TCP connections to one of     these ports could use this flaw to cause dhcpd to exit     unexpectedly, stop responding requests, or exhaust     system sockets (denial of service).(CVE-2016-2774)

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality.(CVE-2017-3144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dhcp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality.(CVE-2017-3144)

  - DHCP packages in Red Hat Enterprise Linux 6 and 7,     Fedora 28, and earlier are vulnerable to a command     injection flaw in the NetworkManager integration script     included in the DHCP client. A malicious DHCP server,     or an attacker on the local network able to spoof DHCP     responses, could use this flaw to execute arbitrary     commands with root privileges on systems using     NetworkManager and configured to obtain network     configuration using the DHCP protocol.(CVE-2018-1111)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
106998	openSUSE Security Update : dhcp (openSUSE-2018-207)	Nessus	SuSE Local Security Checks	2018/2/26	2025/10/27	high
117550	EulerOS Virtualization 2.5.0 : dhcp (EulerOS-SA-2018-1241)	Nessus	Huawei Local Security Checks	2018/9/18	2024/8/7	high
127178	NewStart CGSL CORE 5.04 / MAIN 5.04 : dhcp Multiple Vulnerabilities (NS-SA-2019-0021)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2025/2/25	high
288911	MiracleLinux 7 : dhcp-4.2.5-58.1.0.1.el7.AXS7 (AXSA:2018-2570:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
106332	RHEL 7 : dhcp (RHSA-2018:0158)	Nessus	Red Hat Local Security Checks	2018/1/25	2024/11/5	high
106763	EulerOS 2.0 SP1 : dhcp (EulerOS-SA-2018-1035)	Nessus	Huawei Local Security Checks	2018/2/13	2025/10/29	high
202774	Photon OS 3.0: Dhcp PHSA-2019-3.0-0016	Nessus	PhotonOS Local Security Checks	2024/7/22	2024/7/24	high
124946	EulerOS Virtualization 3.0.1.0 : dhcp (EulerOS-SA-2019-1443)	Nessus	Huawei Local Security Checks	2019/5/14	2022/5/20	high
124882	EulerOS Virtualization for ARM 64 3.0.1.0 : dhcp (EulerOS-SA-2019-1379)	Nessus	Huawei Local Security Checks	2019/5/14	2025/3/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high