CVE-2017-13704
High · 7.5CVSS
7.5
EPSS
65.4%
Published
Oct 3, 2017
CISA due date
—
The record
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.10 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.11 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.12 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.13 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.14 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.15 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.16 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.17 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.18 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.19 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.20 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.21 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.22 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.7 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.8 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.9 | dnsmasq | 0 | 2.78-r0 |
| Debian:11 | dnsmasq | 0 | 2.78-1 |
| Debian:12 | dnsmasq | 0 | 2.78-1 |
| Debian:13 | dnsmasq | 0 | 2.78-1 |
| Debian:14 | dnsmasq | 0 | 2.78-1 |
| Mageia:5 | dnsmasq | 0 | 2.77-1.1.mga5 |
| Mageia:6 | dnsmasq | 0 | 2.77-1.2.mga6 |
| Ubuntu:14.04:LTS | dnsmasq | 0 | 2.68-1ubuntu0.1 |
| Ubuntu:16.04:LTS | dnsmasq | 0 | 2.75-1ubuntu0.16.04.2 |
Related vulnerabilities
- CVE-2017-14491 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… Also affects dnsmasq
- CVE-2017-14496 Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the… Also affects dnsmasq
- CVE-2017-14492 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… Also affects dnsmasq
- CVE-2017-14495 Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet… Also affects dnsmasq
- CVE-2017-14494 dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain… Also affects dnsmasq
- CVE-2017-14493 Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… Also affects dnsmasq
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects dnsmasq
- CVE-2015-8899 Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a… Also affects dnsmasq