rpm package
suse/dnsmasq&distro=SUSE Linux Enterprise Server 11 SP4
pkg:rpm/suse/dnsmasq&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4
Vulnerabilities (8)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-14491 | Cri | 9.8 | < 2.78-0.17.5.1 | 2.78-0.17.5.1 | Oct 4, 2017 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. | |
| CVE-2017-14496 | Hig | 7.5 | < 2.78-0.17.5.1 | 2.78-0.17.5.1 | Oct 3, 2017 | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request. | |
| CVE-2017-14495 | Hig | 7.5 | < 2.78-0.17.5.1 | 2.78-0.17.5.1 | Oct 3, 2017 | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation. | |
| CVE-2017-14494 | Med | 5.9 | < 2.78-0.17.5.1 | 2.78-0.17.5.1 | Oct 3, 2017 | dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests. | |
| CVE-2017-14493 | Cri | 9.8 | < 2.78-0.17.5.1 | 2.78-0.17.5.1 | Oct 3, 2017 | Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request. | |
| CVE-2017-14492 | Cri | 9.8 | < 2.78-0.17.5.1 | 2.78-0.17.5.1 | Oct 3, 2017 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request. | |
| CVE-2015-8899 | Hig | 7.5 | < 2.71-0.16.3 | 2.71-0.16.3 | Jun 30, 2016 | Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally. | |
| CVE-2015-3294 | — | < 2.78-0.17.5.1 | 2.78-0.17.5.1 | May 8, 2015 | The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request. |
- affected < 2.78-0.17.5.1fixed 2.78-0.17.5.1
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
- affected < 2.78-0.17.5.1fixed 2.78-0.17.5.1
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
- affected < 2.78-0.17.5.1fixed 2.78-0.17.5.1
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
- affected < 2.78-0.17.5.1fixed 2.78-0.17.5.1
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
- affected < 2.78-0.17.5.1fixed 2.78-0.17.5.1
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
- affected < 2.78-0.17.5.1fixed 2.78-0.17.5.1
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
- affected < 2.71-0.16.3fixed 2.71-0.16.3
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
- CVE-2015-3294May 8, 2015affected < 2.78-0.17.5.1fixed 2.78-0.17.5.1
The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.