High severity7.5NVD Advisory· Published Oct 3, 2017· Updated May 13, 2026
CVE-2017-13704
CVE-2017-13704
Description
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.
Affected products
13cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- thekelleys.org.uk/dnsmasq/CHANGELOGnvdRelease NotesVendor Advisory
- www.securityfocus.com/bid/101085nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1039474nvdThird Party AdvisoryVDB Entry
- access.redhat.com/security/vulnerabilities/3199382nvdIssue TrackingThird Party Advisory
- security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.htmlnvdThird Party Advisory
- www.securityfocus.com/bid/101977nvd
- cert-portal.siemens.com/productcert/pdf/ssa-689071.pdfnvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TK6DWC53WSU6633EVZL7H4PCWBYHMHK/nvd
- www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.htmlnvd
- www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.htmlnvd
- www.synology.com/support/security/Synology_SA_17_59_Dnsmasqnvd
News mentions
0No linked articles in our index yet.