dhcp-4.2.5-58.1.0.1.el7.AXS7

エラータID: AXSA:2018-2570:01

Release date: 
Thursday, February 1, 2018 - 17:09
Subject: 
dhcp-4.2.5-58.1.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

* It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI functionality. (CVE-2017-3144)

CVE-2017-3144
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2017-3144
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
Additional Info: 

N/A

Download: 

SRPMS
  1. dhcp-4.2.5-58.1.0.1.el7.AXS7.src.rpm
    MD5: 394e39414566cf07b41b197e34b688a3
    SHA-256: cf64596e3c35f7dbf40f08e9b17abc3ba4c5509829ff7532f0ab7586b55a8988
    Size: 8.07 MB

Asianux Server 7 for x86_64
  1. dhclient-4.2.5-58.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 0e2566fe62ba80fdad430d30cd56cdfb
    SHA-256: 3196524e12a05e96e5162f77d8306160eedc71657cf5635a783a8f69d31c4d4f
    Size: 281.00 kB
  2. dhcp-4.2.5-58.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 27115be044aaeadb0ff7daed70d7bca3
    SHA-256: c06b1efcefbb1972e3427ab7734e5a485530cfca6b44ab6c5fb8c77ffab8a68c
    Size: 512.39 kB
  3. dhcp-common-4.2.5-58.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 3be0027ce65ddb43a59f200f5fc3ac06
    SHA-256: eba9a14a7e58b40f2439fa4822ff72a3df331aacf36fa1b309d80ffc03fdac1f
    Size: 172.88 kB
  4. dhcp-libs-4.2.5-58.1.0.1.el7.AXS7.x86_64.rpm
    MD5: c85e09d2d7b8ae7ff015a21b475d781a
    SHA-256: b32a2d1d3365c2b72329e7b385750ebfd514e4e46cdc762d5fe56fbf324ea9b9
    Size: 129.31 kB
  5. dhcp-libs-4.2.5-58.1.0.1.el7.AXS7.i686.rpm
    MD5: 4e2fd392935f37e92a8e2fd8e5f6e236
    SHA-256: a4343bd85ab6dd2b5583122514cc471b8fcbfb510f58ccba636099acb76ea23f
    Size: 128.93 kB