The DHCP server version installed on the remote host is 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, or 4.3.0 to 4.3.6. It is, therefore, vulnerable to a denial of service condition with in the omapi_connection_writer() function of the omapip/buffer.c script due to improper handling of an empty message. A local attacker could potentially exhaust the available descriptors.

This update for dhcp fixes several issues. This security issue was fixed :

  - CVE-2017-3144: OMAPI code didn't free socket descriptors     when empty message is received allowing DoS     (bsc#1076119).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. The Common Vulnerabilities and Exposures project identifies the following issues :

  - CVE-2017-3144     It was discovered that the DHCP server does not properly     clean up closed OMAPI connections, which can lead to     exhaustion of the pool of socket descriptors available     to the DHCP server, resulting in denial of service.

  - CVE-2018-5732     Felix Wilhelm of the Google Security Team discovered     that the DHCP client is prone to an out-of-bound memory     access vulnerability when processing specially     constructed DHCP options responses, resulting in     potential execution of arbitrary code by a malicious     DHCP server.

  - CVE-2018-5733     Felix Wilhelm of the Google Security Team discovered     that the DHCP server does not properly handle reference     counting when processing client requests. A malicious     client can take advantage of this flaw to cause a denial     of service (dhcpd crash) by sending large amounts of     traffic.

The remote host is affected by the vulnerability described in GLSA-201804-05 (ISC DHCP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ISC DHCP. Please review       the CVE identifiers referenced below for details.
  Impact :

    Remote attackers could execute arbitrary code, cause a Denial of Service       condition, or have other unspecified impacts.
  Workaround :

    There are no known workarounds at this time for CVE-2018-5732 or       CVE-2018-5733.
    In accordance with upstream documentation, the recommended workaround       for CVE-2017-3144 is, &ldquo;to disallow access to the OMAPI control port       from unauthorized clients (in accordance with best practices for server       operation).&rdquo;

According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality. (CVE-2017-3144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the dhcp package has been released.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0158 advisory.

    The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP     network to get their own network configuration information, including an IP address, a subnet mask, and a     broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and     administer DHCP on a network.

    Security Fix(es):

    * It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the     DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x     before 4.3.3-P1 allows remote attackers to cause a     denial of service (application crash) via an invalid     length field in a UDP IPv4 packet.(CVE-2015-8605)

  - A denial of service flaw was found in the way dhcpd     handled reference counting when processing client     requests. A malicious DHCP client could use this flaw     to trigger a reference count overflow on the server     side, potentially causing dhcpd to crash, by sending     large amounts of traffic.(CVE-2018-5733)

  - An out-of-bound memory access flaw was found in the way     dhclient processed a DHCP response packet. A malicious     DHCP server could potentially use this flaw to crash     dhclient processes running on DHCP client machines via     a crafted DHCP response packet.(CVE-2018-5732)

  - A resource-consumption flaw was discovered in the DHCP     server. dhcpd did not restrict the number of open     connections to OMAPI and failover ports. A remote     attacker able to establish TCP connections to one of     these ports could use this flaw to cause dhcpd to exit     unexpectedly, stop responding requests, or exhaust     system sockets (denial of service).(CVE-2016-2774)

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality.(CVE-2017-3144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dhcp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality.(CVE-2017-3144)

  - DHCP packages in Red Hat Enterprise Linux 6 and 7,     Fedora 28, and earlier are vulnerable to a command     injection flaw in the NetworkManager integration script     included in the DHCP client. A malicious DHCP server,     or an attacker on the local network able to spoof DHCP     responses, could use this flaw to execute arbitrary     commands with root privileges on systems using     NetworkManager and configured to obtain network     configuration using the DHCP protocol.(CVE-2018-1111)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
106202	ISC DHCP 4.1.0 to 4.1-ESV-R15 / 4.2.0 to 4.2.8 / 4.3.0 to 4.3.6 DoS vulnerability	Nessus	Misc.	2018/1/19	2021/10/25	high
107002	SUSE SLED12 / SLES12 Security Update : dhcp (SUSE-SU-2018:0532-1)	Nessus	SuSE Local Security Checks	2018/2/26	2025/10/27	high
107199	Debian DSA-4133-1 : isc-dhcp - security update	Nessus	Debian Local Security Checks	2018/3/8	2025/10/24	high
108926	GLSA-201804-05 : ISC DHCP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/4/10	2024/11/12	high
106763	EulerOS 2.0 SP1 : dhcp (EulerOS-SA-2018-1035)	Nessus	Huawei Local Security Checks	2018/2/13	2025/10/29	high
202774	Photon OS 3.0: Dhcp PHSA-2019-3.0-0016	Nessus	PhotonOS Local Security Checks	2024/7/22	2024/7/24	high
106332	RHEL 7 : dhcp (RHSA-2018:0158)	Nessus	Red Hat Local Security Checks	2018/1/25	2024/11/5	high
124946	EulerOS Virtualization 3.0.1.0 : dhcp (EulerOS-SA-2019-1443)	Nessus	Huawei Local Security Checks	2019/5/14	2022/5/20	high
124882	EulerOS Virtualization for ARM 64 3.0.1.0 : dhcp (EulerOS-SA-2019-1379)	Nessus	Huawei Local Security Checks	2019/5/14	2025/3/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high