A vulnerability was found in dnsmasq before version 2.81 where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

A memory leak in dnsmasq before Version 2.81 allows remote attackers to cause DoS via DHCP response creation.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities (CVE-2019-12450)	4 Aug 202117:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilties have been fixed in the IBM Security Access Manager and IBM Security Verify Access appliances.	16 Mar 202119:55	–	ibm
Tenable Nessus	Amazon Linux 2 : dnsmasq (ALAS-2020-1507)	27 Oct 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : dnsmasq (ALAS-2020-1458)	22 Mar 202300:00	–	nessus
Tenable Nessus	CentOS 8 : dnsmasq (CESA-2020:1715)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : dnsmasq (RHSA-2020:3878)	30 Nov 202000:00	–	nessus
Tenable Nessus	dnsmasq < 2.81 Denial of Service (DoS) Vulnerability	8 May 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : dnsmasq (EulerOS-SA-2020-1097)	24 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : dnsmasq (EulerOS-SA-2020-1378)	15 Apr 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : dnsmasq (EulerOS-SA-2020-1530)	1 May 202000:00	–	nessus

Vulners

Node

18 Aug 2020 07:00Current

5Medium risk

Vulners AI Score5

CVSS 3.13.7

CVSS 24.3

CVSS 33.7

EPSS0.00044