Security update for dhcp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0444-1 Final 1 1 2018-02-14T15:03:33Z current 2018-02-14T15:03:33Z 2018-02-14T15:03:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for dhcp This update for dhcp fixes several issues. This security issue was fixed: - CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message is received allowing DoS (bsc#1076119) This non-security issue was fixed: - Enhance dhclient-script to handle static route updates. (bsc#1023415) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-dhcp-13465,slessp4-dhcp-13465 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180444-1/ Link for SUSE-SU-2018:0444-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003731.html E-Mail link for SUSE-SU-2018:0444-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1023415 SUSE Bug 1023415 https://bugzilla.suse.com/1076119 SUSE Bug 1076119 https://www.suse.com/security/cve/CVE-2017-3144/ SUSE CVE CVE-2017-3144 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 dhcp-devel-4.2.4.P2-0.28.5.3 dhcp-4.2.4.P2-0.28.5.3 dhcp-client-4.2.4.P2-0.28.5.3 dhcp-relay-4.2.4.P2-0.28.5.3 dhcp-server-4.2.4.P2-0.28.5.3 dhcp-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Server 11 SP4 dhcp-client-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Server 11 SP4 dhcp-relay-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Server 11 SP4 dhcp-server-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Server 11 SP4 dhcp-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 dhcp-client-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 dhcp-relay-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 dhcp-server-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 dhcp-devel-4.2.4.P2-0.28.5.3 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. CVE-2017-3144 SUSE Linux Enterprise Server 11 SP4:dhcp-4.2.4.P2-0.28.5.3 SUSE Linux Enterprise Server 11 SP4:dhcp-client-4.2.4.P2-0.28.5.3 SUSE Linux Enterprise Server 11 SP4:dhcp-relay-4.2.4.P2-0.28.5.3 SUSE Linux Enterprise Server 11 SP4:dhcp-server-4.2.4.P2-0.28.5.3 SUSE Linux Enterprise Server for SAP Applications 11 SP4:dhcp-4.2.4.P2-0.28.5.3 SUSE Linux Enterprise Server for SAP Applications 11 SP4:dhcp-client-4.2.4.P2-0.28.5.3 SUSE Linux Enterprise Server for SAP Applications 11 SP4:dhcp-relay-4.2.4.P2-0.28.5.3 SUSE Linux Enterprise Server for SAP Applications 11 SP4:dhcp-server-4.2.4.P2-0.28.5.3 SUSE Linux Enterprise Software Development Kit 11 SP4:dhcp-devel-4.2.4.P2-0.28.5.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180444-1/ https://www.suse.com/security/cve/CVE-2017-3144.html CVE-2017-3144 https://bugzilla.suse.com/1076118 SUSE Bug 1076118 https://bugzilla.suse.com/1076119 SUSE Bug 1076119