[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2017-14491Date: (C)2017-10-04   (M)2023-12-22


Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 9.8CVSS Score : 7.5
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 5.9Impact Score: 6.4
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: PARTIAL
Scope: UNCHANGEDIntegrity: PARTIAL
Confidentiality: HIGHAvailability: PARTIAL
Integrity: HIGH 
Availability: HIGH 
  
Reference:
BID-101085
BID-101977
SECTRACK-1039474
EXPLOIT-DB-42941
DSA-3989
FEDORA-2017-24f067299e
FEDORA-2017-515264ae24
FEDORA-2017-7106a157f5
GLSA-201710-27
RHSA-2017:2836
RHSA-2017:2837
RHSA-2017:2838
RHSA-2017:2839
RHSA-2017:2840
RHSA-2017:2841
SUSE-SU-2017:2616
SUSE-SU-2017:2617
SUSE-SU-2017:2619
USN-3430-1
USN-3430-2
USN-3430-3
VU#973527
https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html
https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html
http://nvidia.custhelp.com/app/answers/detail/a_id/4560
http://nvidia.custhelp.com/app/answers/detail/a_id/4561
http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html
http://thekelleys.org.uk/dnsmasq/CHANGELOG
http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en
https://access.redhat.com/security/vulnerabilities/3199382
https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/
https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
openSUSE-SU-2017:2633

CPE    17
cpe:/o:debian:debian_linux:9.0
cpe:/a:thekelleys:dnsmasq
cpe:/o:debian:debian_linux:7.0
cpe:/o:debian:debian_linux:7.1
...
CWE    1
CWE-787
OVAL    19
oval:org.secpod.oval:def:2101331
oval:org.secpod.oval:def:204563
oval:org.secpod.oval:def:89044703
oval:org.secpod.oval:def:89044671
...

© SecPod Technologies