CVE-2017-14492
Critical · 9.8CVSS
9.8
EPSS
94.5%
Published
Oct 3, 2017
CISA due date
—
The record
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.10 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.11 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.12 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.13 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.14 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.15 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.16 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.17 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.18 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.19 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.20 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.21 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.22 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.3 | dnsmasq | 0 | 2.76-r1 |
| Alpine:v3.4 | dnsmasq | 0 | 2.76-r1 |
| Alpine:v3.5 | dnsmasq | 0 | 2.76-r2 |
| Alpine:v3.6 | dnsmasq | 0 | 2.76-r5 |
| Alpine:v3.7 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.8 | dnsmasq | 0 | 2.78-r0 |
| Alpine:v3.9 | dnsmasq | 0 | 2.78-r0 |
| Debian:11 | dnsmasq | 0 | 2.78-1 |
| Debian:12 | dnsmasq | 0 | 2.78-1 |
| Debian:13 | dnsmasq | 0 | 2.78-1 |
| Debian:14 | dnsmasq | 0 | 2.78-1 |
| Debian:7 | dnsmasq | 0 | 2.62-3+deb7u4 |
| Debian:8 | dnsmasq | 0 | 2.72-3+deb8u2 |
| Debian:9 | dnsmasq | 0 | 2.76-5+deb9u1 |
| Mageia:5 | dnsmasq | 0 | 2.77-1.1.mga5 |
| Mageia:6 | dnsmasq | 0 | 2.77-1.2.mga6 |
| Red Hat:enterprise_linux:7::client | dnsmasq | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::client | dnsmasq-debuginfo | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::client | dnsmasq-utils | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::computenode | dnsmasq | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::computenode | dnsmasq-debuginfo | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::computenode | dnsmasq-utils | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::server | dnsmasq | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::server | dnsmasq-debuginfo | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::server | dnsmasq-utils | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::workstation | dnsmasq | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::workstation | dnsmasq-debuginfo | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:enterprise_linux:7::workstation | dnsmasq-utils | 0 | 0:2.76-2.el7_4.2 |
| Red Hat:rhel_eus:7.2::computenode | dnsmasq | 0 | 0:2.66-14.el7_2.2 |
| Red Hat:rhel_eus:7.2::computenode | dnsmasq-debuginfo | 0 | 0:2.66-14.el7_2.2 |
| Red Hat:rhel_eus:7.2::computenode | dnsmasq-utils | 0 | 0:2.66-14.el7_2.2 |
| Red Hat:rhel_eus:7.2::server | dnsmasq | 0 | 0:2.66-14.el7_2.2 |
| Red Hat:rhel_eus:7.2::server | dnsmasq-debuginfo | 0 | 0:2.66-14.el7_2.2 |
| Red Hat:rhel_eus:7.2::server | dnsmasq-utils | 0 | 0:2.66-14.el7_2.2 |
| Red Hat:rhel_eus:7.3::computenode | dnsmasq | 0 | 0:2.66-21.el7_3.2 |
| Red Hat:rhel_eus:7.3::computenode | dnsmasq-debuginfo | 0 | 0:2.66-21.el7_3.2 |
| Red Hat:rhel_eus:7.3::computenode | dnsmasq-utils | 0 | 0:2.66-21.el7_3.2 |
| Red Hat:rhel_eus:7.3::server | dnsmasq | 0 | 0:2.66-21.el7_3.2 |
| Red Hat:rhel_eus:7.3::server | dnsmasq-debuginfo | 0 | 0:2.66-21.el7_3.2 |
| Red Hat:rhel_eus:7.3::server | dnsmasq-utils | 0 | 0:2.66-21.el7_3.2 |
| SUSE:Linux Enterprise Desktop 12 SP2 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:Linux Enterprise Desktop 12 SP3 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:Linux Enterprise Point of Sale 11 SP3 | dnsmasq | 0 | 2.78-0.16.5.1 |
| SUSE:Linux Enterprise Server 11 SP3-LTSS | dnsmasq | 0 | 2.78-0.16.5.1 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | dnsmasq | 0 | 2.78-0.16.5.1 |
| SUSE:Linux Enterprise Server 11 SP4 | dnsmasq | 0 | 2.78-0.17.5.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:Linux Enterprise Server 12 SP2 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:Linux Enterprise Server 12 SP3 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:Linux Enterprise Server 12-LTSS | dnsmasq | 0 | 2.78-6.6.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | dnsmasq | 0 | 2.78-0.17.5.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:OpenStack Cloud 6 | dnsmasq | 0 | 2.78-18.3.1 |
| SUSE:OpenStack Cloud 7 | dnsmasq | 0 | 2.78-18.3.1 |
| Ubuntu:14.04:LTS | dnsmasq | 0 | 2.68-1ubuntu0.2 |
| Ubuntu:16.04:LTS | dnsmasq | 0 | 2.75-1ubuntu0.16.04.3 |
| openSUSE:Tumbleweed | dnsmasq | 0 | 2.86-1.1 |
Related vulnerabilities
- CVE-2017-14491 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… Also affects dnsmasq
- CVE-2017-14496 Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the… Also affects dnsmasq
- CVE-2017-14495 Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet… Also affects dnsmasq
- CVE-2017-14494 dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain… Also affects dnsmasq
- CVE-2017-14493 Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… Also affects dnsmasq
- CVE-2017-13704 In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size… Also affects dnsmasq
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects dnsmasq
- CVE-2015-8899 Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a… Also affects dnsmasq