The vulnerability of the DNS server Dnsmasq, caused by overflow in the dynamic memory buffer, allows a hacker to cause a service failure or execute arbitrary code.

🗓️ 03 Nov 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Dnsmasq overflow in dynamic memory buffer allows remote attacker to crash or execute code via crafted IPv6 request.

Reporter	Title	Published	Views	Family All 126
0day.today	Dnsmasq < 2.78 - Heap-Based Overflow Exploit	2 Oct 201700:00	–	zdt
ALT Linux	Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1	6 Oct 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Cloud Manager with OpenStack affect IBM Cloud Orchestrator and Cloud Orchestrator Enterprise	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in dnsmasq affect IBM Cloud Manager with OpenStack	8 Aug 201804:13	–	ibm
Tenable Nessus	Amazon Linux 2 : dnsmasq (ALAS-2019-1251)	24 Jul 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : dnsmasq (ALAS-2017-907)	3 Oct 201700:00	–	nessus
Tenable Nessus	CentOS 7 : dnsmasq (CESA-2017:2836)	3 Oct 201700:00	–	nessus
Tenable Nessus	Debian DLA-1124-1 : dnsmasq security update	9 Oct 201700:00	–	nessus
Tenable Nessus	Debian DSA-3989-1 : dnsmasq - security update	3 Oct 201700:00	–	nessus
Tenable Nessus	dnsmasq < 2.78 Multiple Remote Vulnerabilities	3 Oct 201700:00	–	nessus

Vulners

Node

simon_kelley dnsmasqRange<2.78

OR

belden owl_3gMatch1.0.00

OR

belden owl_3gMatch1.1.00

OR

belden owl_3gMatch1.2.01

OR

belden owl_3gMatch1.2.04

OR

belden owl_lteMatch1.0.00

OR

belden owl_lteMatch1.1.00

OR

belden owl_lteMatch1.2.01

OR

belden owl_lteMatch1.2.04

OR

belden owl_lte_m12Match1.0.00

OR

belden owl_lte_m12Match1.1.00

OR

belden owl_lte_m12Match1.2.01

OR

belden owl_lte_m12Match1.2.04

Source	Link
thekelleys	www.thekelleys.org.uk/dnsmasq/CHANGELOG
thekelleys	www.thekelleys.org.uk/gitweb/
debian	www.debian.org/security/2017/dsa-3989
securityfocus	www.securityfocus.com/bid/101085
securitytracker	www.securitytracker.com/id/1039474
ubuntu	www.ubuntu.com/usn/USN-3430-1
ubuntu	www.ubuntu.com/usn/USN-3430-2
access	www.access.redhat.com/errata/RHSA-2017:2836
access	www.access.redhat.com/errata/RHSA-2017:2837
access	www.access.redhat.com/security/vulnerabilities/3199382

10 Nov 2022 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 27.5

CVSS 39.8

EPSS0.93379

domain name system memory buffer overflow remote attacker arbitrary code sixth internet protocol