Security update for dhcp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0532-1 Final 1 1 2018-02-23T17:37:41Z current 2018-02-23T17:37:41Z 2018-02-23T17:37:41Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for dhcp This update for dhcp fixes several issues. This security issue was fixed: - CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message is received allowing DoS (bsc#1076119). These non-security issues were fixed: - Optimized if and when DNS client context and ports are initted (bsc#1073935) - Relax permission of dhclient-script for libguestfs (bsc#987170) - Modify dhclient-script to handle static route updates (bsc#1023415). - Use only the 12 least significant bits of an inbound packet's TCI value as the VLAN ID to fix some packages being wrongly discarded by the Linux packet filter. (bsc#1059061) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP2-2018-351,SUSE-SLE-DESKTOP-12-SP3-2018-351,SUSE-SLE-RPI-12-SP2-2018-351,SUSE-SLE-SDK-12-SP2-2018-351,SUSE-SLE-SDK-12-SP3-2018-351,SUSE-SLE-SERVER-12-SP2-2018-351,SUSE-SLE-SERVER-12-SP3-2018-351 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180532-1/ Link for SUSE-SU-2018:0532-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003752.html E-Mail link for SUSE-SU-2018:0532-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1023415 SUSE Bug 1023415 https://bugzilla.suse.com/1059061 SUSE Bug 1059061 https://bugzilla.suse.com/1073935 SUSE Bug 1073935 https://bugzilla.suse.com/1076119 SUSE Bug 1076119 https://bugzilla.suse.com/987170 SUSE Bug 987170 https://www.suse.com/security/cve/CVE-2017-3144/ SUSE CVE CVE-2017-3144 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 dhcp-4.3.3-10.11.1 dhcp-client-4.3.3-10.11.1 dhcp-relay-4.3.3-10.11.1 dhcp-server-4.3.3-10.11.1 dhcp-devel-4.3.3-10.11.1 dhcp-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 dhcp-client-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 dhcp-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 dhcp-client-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 dhcp-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 dhcp-client-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 dhcp-relay-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 dhcp-server-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 dhcp-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server 12 SP3 dhcp-client-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server 12 SP3 dhcp-relay-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server 12 SP3 dhcp-server-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server 12 SP3 dhcp-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 dhcp-client-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 dhcp-relay-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 dhcp-server-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 dhcp-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 dhcp-client-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 dhcp-relay-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 dhcp-server-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 dhcp-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 dhcp-client-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 dhcp-relay-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 dhcp-server-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 dhcp-devel-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 dhcp-devel-4.3.3-10.11.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. CVE-2017-3144 SUSE Linux Enterprise Desktop 12 SP2:dhcp-4.3.3-10.11.1 SUSE Linux Enterprise Desktop 12 SP2:dhcp-client-4.3.3-10.11.1 SUSE Linux Enterprise Desktop 12 SP3:dhcp-4.3.3-10.11.1 SUSE Linux Enterprise Desktop 12 SP3:dhcp-client-4.3.3-10.11.1 SUSE Linux Enterprise Server 12 SP2:dhcp-4.3.3-10.11.1 SUSE Linux Enterprise Server 12 SP2:dhcp-client-4.3.3-10.11.1 SUSE Linux Enterprise Server 12 SP2:dhcp-relay-4.3.3-10.11.1 SUSE Linux Enterprise Server 12 SP2:dhcp-server-4.3.3-10.11.1 SUSE Linux Enterprise Server 12 SP3:dhcp-4.3.3-10.11.1 SUSE Linux Enterprise Server 12 SP3:dhcp-client-4.3.3-10.11.1 SUSE Linux Enterprise Server 12 SP3:dhcp-relay-4.3.3-10.11.1 SUSE Linux Enterprise Server 12 SP3:dhcp-server-4.3.3-10.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:dhcp-4.3.3-10.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:dhcp-client-4.3.3-10.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:dhcp-relay-4.3.3-10.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:dhcp-server-4.3.3-10.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:dhcp-4.3.3-10.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:dhcp-client-4.3.3-10.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:dhcp-relay-4.3.3-10.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:dhcp-server-4.3.3-10.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:dhcp-4.3.3-10.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:dhcp-client-4.3.3-10.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:dhcp-relay-4.3.3-10.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:dhcp-server-4.3.3-10.11.1 SUSE Linux Enterprise Software Development Kit 12 SP2:dhcp-devel-4.3.3-10.11.1 SUSE Linux Enterprise Software Development Kit 12 SP3:dhcp-devel-4.3.3-10.11.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180532-1/ https://www.suse.com/security/cve/CVE-2017-3144.html CVE-2017-3144 https://bugzilla.suse.com/1076118 SUSE Bug 1076118 https://bugzilla.suse.com/1076119 SUSE Bug 1076119