dnsmasq security update

🗓️ 03 Oct 2017 00:04:45Reported by CentOS ProjectType

dnsmasq security update CESA-2017:2836 includes multiple security fixes for heap and stack buffer overflows, information leak, memory exhaustion, and integer underflow vulnerabilities

Reporter	Title	Published	Views	Family All 302
0day.today	Dnsmasq < 2.78 - 2-byte Heap-Based Overflow Exploit	2 Oct 201700:00	–	zdt
0day.today	Dnsmasq < 2.78 - Heap-Based Overflow Exploit	2 Oct 201700:00	–	zdt
0day.today	Dnsmasq < 2.78 - Stack-Based Overflow Exploit	2 Oct 201700:00	–	zdt
0day.today	Dnsmasq < 2.78 - Information Leak Exploit	2 Oct 201700:00	–	zdt
0day.today	Dnsmasq < 2.78 - Lack of free() Denial of Service Exploit	2 Oct 201700:00	–	zdt
0day.today	Dnsmasq < 2.78 - Integer Underflow Exploit	2 Oct 201700:00	–	zdt
ALT Linux	Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1	6 Oct 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Cloud Manager with OpenStack affect IBM Cloud Orchestrator and Cloud Orchestrator Enterprise	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in dnsmasq affect IBM Cloud Manager with OpenStack	8 Aug 201804:13	–	ibm
Tenable Nessus	Amazon Linux 2 : dnsmasq (ALAS-2019-1251)	24 Jul 201900:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
CentOS	7	x86_64	dnsmasq	2.76-2.el7_4.2	dnsmasq-2.76-2.el7_4.2.x86_64.rpm
CentOS	7	x86_64	dnsmasq-utils	2.76-2.el7_4.2	dnsmasq-utils-2.76-2.el7_4.2.x86_64.rpm

Source	Link
twitter	www.twitter.com/centos
steadfast	www.steadfast.net/
linkedin	www.linkedin.com/groups/22405
youtube	www.youtube.com/TheCentOSProject
access	www.access.redhat.com/errata/RHSA-2017:2836
facebook	www.facebook.com/groups/centosproject/
reddit	www.reddit.com/r/CentOS/

03 Oct 2017 00:04Current

7.5High risk

Vulners AI Score7.5

CVSS 27.8

CVSS 3.19.8

CVSS 39.8

EPSS0.93307