Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-13704
HistoryOct 03, 2017 - 1:29 a.m.

CVE-2017-13704

2017-10-0301:29:00
CWE-20
[email protected]
web.nvd.nist.gov
162
cve
2017
13704
dnsmasq
security vulnerability
nvd
dns
crash

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.648 Medium

EPSS

Percentile

97.9%

JSON

In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero’s (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.

Related

prion 1
alpinelinux 1
fedora 1
nessus 7
osv 1
ubuntucve 1
checkpoint_advisories 1
redhatcve 2
debiancve 1
openvas 5
ics 1
threatpost 1
freebsd 1
ibm 2
myhack58 1
f5 1
altlinux 1
slackware 1
huawei 1
mageia 2
rosalinux 1
photon 1
prion
prion
Code injection
2017-10-03 01:29:00
alpinelinux
alpinelinux
CVE-2017-13704
2017-10-03 01:29:00
fedora
fedora
[SECURITY] Fedora 27 Update: dnsmasq-2.77-7.fc27
2017-09-30 07:42:04
nessus
nessus
Fedora 27 : dnsmasq (2017-274d763ed8)
2018-01-15 00:00:00
EulerOS Virtualization 2.5.3 : dnsmasq (EulerOS-SA-2019-1174)
2019-04-09 00:00:00
dnsmasq < 2.78 Multiple Remote Vulnerabilities
2017-10-03 00:00:00
osv
osv
CVE-2017-13704
2017-10-03 01:29:01
ubuntucve
ubuntucve
CVE-2017-13704
2017-10-02 00:00:00
checkpoint_advisories
checkpoint_advisories
DNSmasq Integer Underflow Denial Of Service (CVE-2017-13704)
2017-10-24 00:00:00
redhatcve
redhatcve
CVE-2017-13704
2017-09-26 08:49:00
CVE-2017-14491
2020-04-09 10:43:20
debiancve
debiancve
CVE-2017-13704
2017-10-03 01:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2019-1174)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2017-0367)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2017-0364)
2022-01-28 00:00:00
ics
ics
Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)
2020-10-13 12:00:00
threatpost
threatpost
Google Warns of DoS and RCE Bugs in Dnsmasq
2017-10-03 13:16:06
freebsd
freebsd
dnsmasq -- multiple vulnerabilities
2017-10-02 00:00:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities in dnsmasq affect IBM Cloud Manager with OpenStack
2018-08-08 04:13:55
Security Bulletin: Multiple security vulnerabilities in IBM Cloud Manager with OpenStack affect IBM Cloud Orchestrator and Cloud Orchestrator Enterprise
2018-06-17 22:33:37
myhack58
myhack58
dnsmasq:exposure out of the plurality of levels is quite high vulnerability-vulnerability warning-the black bar safety net
2017-10-10 00:00:00
f5
f5
K32582354 : Multiple dnsmasq vulnerabilities
2017-10-05 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1
2017-10-06 00:00:00
slackware
slackware
[slackware-security] dnsmasq
2017-10-02 18:43:20
huawei
huawei
Security Advisory - Seven vulnerabilities in Google Dnsmasq
2017-11-03 00:00:00
mageia
mageia
Updated dnsmasq packages fix security vulnerabilities
2017-10-09 12:51:10
Updated dnsmasq packages fix security vulnerabilities
2017-10-09 12:51:10
rosalinux
rosalinux
Advisory ROSA-SA-2021-1823
2021-07-02 16:38:26
photon
photon
Critical Photon OS Security Update - PHSA-2017-0078
2017-10-19 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.648 Medium

EPSS

Percentile

97.9%

JSON
Related for CVE-2017-13704
prion1alpinelinux1fedora1nessus7osv1ubuntucve1checkpoint_advisories1redhatcve2debiancve1openvas5ics1threatpost1freebsd1ibm2myhack581f51altlinux1slackware1huawei1mageia2rosalinux1photon1