{"id": "UBUNTU_USN-2593-1.NASL", "bulletinFamily": "scanner", "title": "Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)", "description": "Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash, resulting in a denial of service, or possibly obtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "published": "2015-05-05T00:00:00", "modified": "2018-08-03T00:00:00", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=83252", "reporter": "Tenable", "references": [], "cvelist": ["CVE-2015-3294"], "type": "nessus", "lastseen": "2018-09-01T23:50:59", "history": [{"bulletin": {"bulletinFamily": "scanner", "cpe": [], "cvelist": ["CVE-2015-3294"], "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}, "description": "Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash, resulting in a denial of service, or possibly obtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 1, "enchantments": {}, "hash": "46b38d63a0054f061cf121b8e7e35f48409e2f9131214b97acc6655c372fdb30", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "d75bcd0156ad5a73da3e7e627ee46f46", "key": "title"}, {"hash": "ddab325b78ee84639dc78b61e4febc39", "key": "modified"}, {"hash": "a92b691c075be932f6b3e5694a741165", "key": "published"}, {"hash": "dce9fdead9c1300c72ee7aed19ffefc3", "key": "description"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "84dbe5f5a3a976716e0830d3ad023fa1", "key": "href"}, {"hash": "3219c26b0594baa5ff0275160f336b80", "key": "pluginID"}, {"hash": "22795962da8c85a31b984af070dc1a3b", "key": "cvelist"}, {"hash": "c9b7d00377a789a14c9bb9dab6c7168c", "key": "naslFamily"}, {"hash": "ea1bdd9185a2c3160cbbe9c0292c3d62", "key": "cvss"}, {"hash": "5000130f40e1a6ac05bcd079bbb22afe", "key": "sourceData"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=83252", "id": "UBUNTU_USN-2593-1.NASL", "lastseen": "2016-09-26T17:25:00", "modified": "2016-05-24T00:00:00", "naslFamily": "Ubuntu Local Security Checks", "objectVersion": "1.2", "pluginID": "83252", "published": "2015-05-05T00:00:00", "references": [], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-2593-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83252);\n script_version(\"$Revision: 2.5 $\");\n script_cvs_date(\"$Date: 2016/05/24 17:44:49 $\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_osvdb_id(121174);\n script_xref(name:\"USN\", value:\"2593-1\");\n\n script_name(english:\"Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Nick Sampanis discovered that Dnsmasq incorrectly handled certain\nmalformed DNS requests. A remote attacker could use this issue to\ncause Dnsmasq to crash, resulting in a denial of service, or possibly\nobtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Update the affected dnsmasq, dnsmasq-base and / or dnsmasq-utils\npackages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:12.04:-:lts\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.10\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:15.04\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/05/04\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/05\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2015-2016 Canonical, Inc. / NASL script (C) 2015-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! ereg(pattern:\"^(12\\.04|14\\.04|14\\.10|15\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 12.04 / 14.04 / 14.10 / 15.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-utils\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.68-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"14.10\", pkgname:\"dnsmasq-base\", pkgver:\"2.71-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"15.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.72-3ubuntu0.1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq / dnsmasq-base / dnsmasq-utils\");\n}\n", "title": "Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)", "type": "nessus", "viewCount": 3}, "differentElements": ["cpe"], "edition": 1, "lastseen": "2016-09-26T17:25:00"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base", "p-cpe:/a:canonical:ubuntu_linux:dnsmasq", "cpe:/o:canonical:ubuntu_linux:15.04", "p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils", "cpe:/o:canonical:ubuntu_linux:14.10", "cpe:/o:canonical:ubuntu_linux:12.04:-:lts", "cpe:/o:canonical:ubuntu_linux:14.04"], "cvelist": ["CVE-2015-3294"], "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}, "description": "Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash, resulting in a denial of service, or possibly obtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 3, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "43732f02751c9fd501f0ae7dcd81f9fba4fa49b99dff80fc0a56dd3d13876294", "hashmap": [{"hash": "dfa55fcf69ce1b0c5a9d6a1699e15449", "key": "sourceData"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "d75bcd0156ad5a73da3e7e627ee46f46", "key": "title"}, {"hash": "a92b691c075be932f6b3e5694a741165", "key": "published"}, {"hash": "dce9fdead9c1300c72ee7aed19ffefc3", "key": "description"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "84dbe5f5a3a976716e0830d3ad023fa1", "key": "href"}, {"hash": "3219c26b0594baa5ff0275160f336b80", "key": "pluginID"}, {"hash": "22795962da8c85a31b984af070dc1a3b", "key": "cvelist"}, {"hash": "30bc7a7df971632787403bfaeb02f2c1", "key": "cpe"}, {"hash": "c9b7d00377a789a14c9bb9dab6c7168c", "key": "naslFamily"}, {"hash": "ea1bdd9185a2c3160cbbe9c0292c3d62", "key": "cvss"}, {"hash": "21fc9686c146fcf6b16f09134dff3269", "key": "modified"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=83252", "id": "UBUNTU_USN-2593-1.NASL", "lastseen": "2018-08-05T11:57:31", "modified": "2018-08-03T00:00:00", "naslFamily": "Ubuntu Local Security Checks", "objectVersion": "1.3", "pluginID": "83252", "published": "2015-05-05T00:00:00", "references": [], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-2593-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83252);\n script_version(\"2.6\");\n script_cvs_date(\"Date: 2018/08/03 12:21:24\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_xref(name:\"USN\", value:\"2593-1\");\n\n script_name(english:\"Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Nick Sampanis discovered that Dnsmasq incorrectly handled certain\nmalformed DNS requests. A remote attacker could use this issue to\ncause Dnsmasq to crash, resulting in a denial of service, or possibly\nobtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Update the affected dnsmasq, dnsmasq-base and / or dnsmasq-utils\npackages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:12.04:-:lts\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.10\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:15.04\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/05/04\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/05\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2015-2018 Canonical, Inc. / NASL script (C) 2015-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! ereg(pattern:\"^(12\\.04|14\\.04|14\\.10|15\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 12.04 / 14.04 / 14.10 / 15.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-utils\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.68-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"14.10\", pkgname:\"dnsmasq-base\", pkgver:\"2.71-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"15.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.72-3ubuntu0.1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq / dnsmasq-base / dnsmasq-utils\");\n}\n", "title": "Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)", "type": "nessus", "viewCount": 5}, "differentElements": ["cvss"], "edition": 3, "lastseen": "2018-08-05T11:57:31"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base", "p-cpe:/a:canonical:ubuntu_linux:dnsmasq", "cpe:/o:canonical:ubuntu_linux:15.04", "p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils", "cpe:/o:canonical:ubuntu_linux:14.10", "cpe:/o:canonical:ubuntu_linux:12.04:-:lts", "cpe:/o:canonical:ubuntu_linux:14.04"], "cvelist": ["CVE-2015-3294"], "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}, "description": "Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash, resulting in a denial of service, or possibly obtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 2, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "2e4ea3e0006714862d08b64d2995f4a0416df73876a77728cb61f66fd078558f", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "d75bcd0156ad5a73da3e7e627ee46f46", "key": "title"}, {"hash": "ddab325b78ee84639dc78b61e4febc39", "key": "modified"}, {"hash": "a92b691c075be932f6b3e5694a741165", "key": "published"}, {"hash": "dce9fdead9c1300c72ee7aed19ffefc3", "key": "description"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "84dbe5f5a3a976716e0830d3ad023fa1", "key": "href"}, {"hash": "3219c26b0594baa5ff0275160f336b80", "key": "pluginID"}, {"hash": "22795962da8c85a31b984af070dc1a3b", "key": "cvelist"}, {"hash": "30bc7a7df971632787403bfaeb02f2c1", "key": "cpe"}, {"hash": "c9b7d00377a789a14c9bb9dab6c7168c", "key": "naslFamily"}, {"hash": "ea1bdd9185a2c3160cbbe9c0292c3d62", "key": "cvss"}, {"hash": "5000130f40e1a6ac05bcd079bbb22afe", "key": "sourceData"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=83252", "id": "UBUNTU_USN-2593-1.NASL", "lastseen": "2017-10-29T13:39:31", "modified": "2016-05-24T00:00:00", "naslFamily": "Ubuntu Local Security Checks", "objectVersion": "1.3", "pluginID": "83252", "published": "2015-05-05T00:00:00", "references": [], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-2593-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83252);\n script_version(\"$Revision: 2.5 $\");\n script_cvs_date(\"$Date: 2016/05/24 17:44:49 $\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_osvdb_id(121174);\n script_xref(name:\"USN\", value:\"2593-1\");\n\n script_name(english:\"Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Nick Sampanis discovered that Dnsmasq incorrectly handled certain\nmalformed DNS requests. A remote attacker could use this issue to\ncause Dnsmasq to crash, resulting in a denial of service, or possibly\nobtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Update the affected dnsmasq, dnsmasq-base and / or dnsmasq-utils\npackages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:12.04:-:lts\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.10\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:15.04\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/05/04\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/05\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2015-2016 Canonical, Inc. / NASL script (C) 2015-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! ereg(pattern:\"^(12\\.04|14\\.04|14\\.10|15\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 12.04 / 14.04 / 14.10 / 15.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-utils\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.68-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"14.10\", pkgname:\"dnsmasq-base\", pkgver:\"2.71-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"15.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.72-3ubuntu0.1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq / dnsmasq-base / dnsmasq-utils\");\n}\n", "title": "Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)", "type": "nessus", "viewCount": 5}, "differentElements": ["modified", "sourceData"], "edition": 2, "lastseen": "2017-10-29T13:39:31"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base", "p-cpe:/a:canonical:ubuntu_linux:dnsmasq", "cpe:/o:canonical:ubuntu_linux:15.04", "p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils", "cpe:/o:canonical:ubuntu_linux:14.10", "cpe:/o:canonical:ubuntu_linux:12.04:-:lts", "cpe:/o:canonical:ubuntu_linux:14.04"], "cvelist": ["CVE-2015-3294"], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash, resulting in a denial of service, or possibly obtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 4, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}}, "hash": "7c06e55d98a6acb7c2be3f8efc6ef57f1e36ee6ec0afd4c6f0744d7d10d5a93f", "hashmap": [{"hash": "dfa55fcf69ce1b0c5a9d6a1699e15449", "key": "sourceData"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "d75bcd0156ad5a73da3e7e627ee46f46", "key": "title"}, {"hash": "a92b691c075be932f6b3e5694a741165", "key": "published"}, {"hash": "dce9fdead9c1300c72ee7aed19ffefc3", "key": "description"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "84dbe5f5a3a976716e0830d3ad023fa1", "key": "href"}, {"hash": "3219c26b0594baa5ff0275160f336b80", "key": "pluginID"}, {"hash": "22795962da8c85a31b984af070dc1a3b", "key": "cvelist"}, {"hash": "30bc7a7df971632787403bfaeb02f2c1", "key": "cpe"}, {"hash": "c9b7d00377a789a14c9bb9dab6c7168c", "key": "naslFamily"}, {"hash": "21fc9686c146fcf6b16f09134dff3269", "key": "modified"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=83252", "id": "UBUNTU_USN-2593-1.NASL", "lastseen": "2018-08-30T19:44:54", "modified": "2018-08-03T00:00:00", "naslFamily": "Ubuntu Local Security Checks", "objectVersion": "1.3", "pluginID": "83252", "published": "2015-05-05T00:00:00", "references": [], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-2593-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83252);\n script_version(\"2.6\");\n script_cvs_date(\"Date: 2018/08/03 12:21:24\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_xref(name:\"USN\", value:\"2593-1\");\n\n script_name(english:\"Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Nick Sampanis discovered that Dnsmasq incorrectly handled certain\nmalformed DNS requests. A remote attacker could use this issue to\ncause Dnsmasq to crash, resulting in a denial of service, or possibly\nobtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Update the affected dnsmasq, dnsmasq-base and / or dnsmasq-utils\npackages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:12.04:-:lts\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.10\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:15.04\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/05/04\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/05\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2015-2018 Canonical, Inc. / NASL script (C) 2015-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! ereg(pattern:\"^(12\\.04|14\\.04|14\\.10|15\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 12.04 / 14.04 / 14.10 / 15.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-utils\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.68-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"14.10\", pkgname:\"dnsmasq-base\", pkgver:\"2.71-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"15.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.72-3ubuntu0.1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq / dnsmasq-base / dnsmasq-utils\");\n}\n", "title": "Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)", "type": "nessus", "viewCount": 5}, "differentElements": ["cvss"], "edition": 4, "lastseen": "2018-08-30T19:44:54"}], "edition": 5, "hashmap": [{"key": "bulletinFamily", "hash": "bbdaea376f500d25f6b0c1050311dd07"}, {"key": "cpe", "hash": "30bc7a7df971632787403bfaeb02f2c1"}, {"key": "cvelist", "hash": "22795962da8c85a31b984af070dc1a3b"}, {"key": "cvss", "hash": "ea1bdd9185a2c3160cbbe9c0292c3d62"}, {"key": "description", "hash": "dce9fdead9c1300c72ee7aed19ffefc3"}, {"key": "href", "hash": "84dbe5f5a3a976716e0830d3ad023fa1"}, {"key": "modified", "hash": "21fc9686c146fcf6b16f09134dff3269"}, {"key": "naslFamily", "hash": "c9b7d00377a789a14c9bb9dab6c7168c"}, {"key": "pluginID", "hash": "3219c26b0594baa5ff0275160f336b80"}, {"key": "published", "hash": "a92b691c075be932f6b3e5694a741165"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "9cf00d658b687f030ebe173a0528c567"}, {"key": "sourceData", "hash": "dfa55fcf69ce1b0c5a9d6a1699e15449"}, {"key": "title", "hash": "d75bcd0156ad5a73da3e7e627ee46f46"}, {"key": "type", "hash": "5e0bd03bec244039678f2b955a2595aa"}], "hash": "43732f02751c9fd501f0ae7dcd81f9fba4fa49b99dff80fc0a56dd3d13876294", "viewCount": 5, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "vulnersScore": 5.0}, "objectVersion": "1.3", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-2593-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83252);\n script_version(\"2.6\");\n script_cvs_date(\"Date: 2018/08/03 12:21:24\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_xref(name:\"USN\", value:\"2593-1\");\n\n script_name(english:\"Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : dnsmasq vulnerability (USN-2593-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Nick Sampanis discovered that Dnsmasq incorrectly handled certain\nmalformed DNS requests. A remote attacker could use this issue to\ncause Dnsmasq to crash, resulting in a denial of service, or possibly\nobtain sensitive information.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Update the affected dnsmasq, dnsmasq-base and / or dnsmasq-utils\npackages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:12.04:-:lts\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.10\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:15.04\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/05/04\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/05\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2015-2018 Canonical, Inc. / NASL script (C) 2015-2016 Tenable Network Security, Inc.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! ereg(pattern:\"^(12\\.04|14\\.04|14\\.10|15\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 12.04 / 14.04 / 14.10 / 15.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"12.04\", pkgname:\"dnsmasq-utils\", pkgver:\"2.59-4ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.68-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"14.10\", pkgname:\"dnsmasq-base\", pkgver:\"2.71-1ubuntu0.1\")) flag++;\nif (ubuntu_check(osver:\"15.04\", pkgname:\"dnsmasq-base\", pkgver:\"2.72-3ubuntu0.1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq / dnsmasq-base / dnsmasq-utils\");\n}\n", "naslFamily": "Ubuntu Local Security Checks", "pluginID": "83252", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:dnsmasq-base", "p-cpe:/a:canonical:ubuntu_linux:dnsmasq", "cpe:/o:canonical:ubuntu_linux:15.04", "p-cpe:/a:canonical:ubuntu_linux:dnsmasq-utils", "cpe:/o:canonical:ubuntu_linux:14.10", "cpe:/o:canonical:ubuntu_linux:12.04:-:lts", "cpe:/o:canonical:ubuntu_linux:14.04"]}

{"cve": [{"lastseen": "2018-10-10T11:05:50", "references": ["http://www.securitytracker.com/id/1032195", "http://www.securityfocus.com/archive/1/535354/100/1100/threaded", "https://security.gentoo.org/glsa/201512-01", "http://www.debian.org/security/2015/dsa-3251", "http://lists.opensuse.org/opensuse-updates/2015-05/msg00013.html", "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html", "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=ad4a8ff7d9097008d7623df8543df435bfddeac8", "http://www.securityfocus.com/bid/74452", "http://www.ubuntu.com/usn/USN-2593-1", "http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2015q2/009382.html", "http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2015q2/009387.html"], "description": "The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.", "edition": 3, "reporter": "NVD", "published": "2015-05-08T10:59:05", "title": "CVE-2015-3294", "type": "cve", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2015-3294"], "scanner": [], "modified": "2018-10-09T15:56:49", "cpe": ["cpe:/o:oracle:solaris:11.2", "cpe:/a:thekelleys:dnsmasq:2.73:rc3"], "id": "CVE-2015-3294", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3294", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}], "ubuntu": [{"lastseen": "2018-08-31T00:10:02", "references": ["https://people.canonical.com/~ubuntu-security/cve/CVE-2015-3294"], "affectedPackage": [{"OS": "Ubuntu", "OSVersion": "12.04", "packageVersion": "2.59-4ubuntu0.2", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "dnsmasq-base", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "15.04", "packageVersion": "2.72-3ubuntu0.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "dnsmasq-base", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.10", "packageVersion": "2.71-1ubuntu0.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "dnsmasq-base", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "12.04", "packageVersion": "2.59-4ubuntu0.2", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "dnsmasq", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "12.04", "packageVersion": "2.59-4ubuntu0.2", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "dnsmasq-utils", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "2.68-1ubuntu0.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "dnsmasq-base", "operator": "lt"}], "description": "Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash, resulting in a denial of service, or possibly obtain sensitive information.", "edition": 3, "reporter": "Ubuntu", "published": "2015-05-04T00:00:00", "title": "Dnsmasq vulnerability", "type": "ubuntu", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "bulletinFamily": "unix", "cvelist": ["CVE-2015-3294"], "modified": "2015-05-04T00:00:00", "id": "USN-2593-1", "href": "https://usn.ubuntu.com/2593-1/", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}], "nessus": [{"lastseen": "2018-09-01T23:48:56", "references": ["https://packages.debian.org/source/squeeze-lts/dnsmasq", "https://lists.debian.org/debian-lts-announce/2015/05/msg00009.html"], "pluginID": "83747", "description": "The following vulnerability vulnerability was found in dnsmasq :\n\nCVE-2015-3294\n\nRemote attackers could read process memory and cause DoS via malformed DNS requests.\n\nFor Debian 6 'Squeeze', these issues have been fixed in dnsmasq version 2.55-2+deb6u1.\n\nNOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 5, "reporter": "Tenable", "published": "2015-05-21T00:00:00", "title": "Debian DLA-225-1 : dnsmasq security update", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Debian Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-07-06T00:00:00", "cpe": ["cpe:/o:debian:debian_linux:6.0", "p-cpe:/a:debian:debian_linux:dnsmasq-base", "p-cpe:/a:debian:debian_linux:dnsmasq"], "id": "DEBIAN_DLA-225.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=83747", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Debian Security Advisory DLA-225-1. The text\n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83747);\n script_version(\"2.6\");\n script_cvs_date(\"Date: 2018/07/06 11:26:06\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_bugtraq_id(74452);\n\n script_name(english:\"Debian DLA-225-1 : dnsmasq security update\");\n script_summary(english:\"Checks dpkg output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The following vulnerability vulnerability was found in dnsmasq :\n\nCVE-2015-3294\n\nRemote attackers could read process memory and cause DoS via malformed\nDNS requests.\n\nFor Debian 6 'Squeeze', these issues have been fixed in\ndnsmasq version 2.55-2+deb6u1.\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://lists.debian.org/debian-lts-announce/2015/05/msg00009.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/squeeze-lts/dnsmasq\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Upgrade the affected dnsmasq, and dnsmasq-base packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:dnsmasq-base\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:6.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/05/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/21\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"6.0\", prefix:\"dnsmasq\", reference:\"2.55-2+deb6u1\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"dnsmasq-base\", reference:\"2.55-2+deb6u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:deb_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:46:44", "references": ["http://www.nessus.org/u?a1888979", "https://www.suse.com/security/cve/CVE-2015-3294.html", "https://bugzilla.suse.com/923144", "http://www.nessus.org/u?d08e481b", "https://bugzilla.suse.com/928867"], "pluginID": "84081", "description": "The DNS server dnsmasq was updated to fix one security issue and one non-security bug :\n\nCVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service (DoS) or read memory from the heap, potentially disclosing information such as performed DNS queries or encryption keys. (bsc#928867)\n\nbsc#923144: When answer to an upstream query is a CNAME pointing to an A/AAAA record which is present locally (/etc/hosts), allow caching when the upstream and local A/AAAA records have the same value.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 5, "reporter": "Tenable", "published": "2015-06-10T00:00:00", "title": "SUSE SLED11 / SLES11 Security Update : dnsmasq (SUSE-SU-2015:1015-1)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-07-31T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:dnsmasq", "cpe:/o:novell:suse_linux:11"], "id": "SUSE_SU-2015-1015-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=84081", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2015:1015-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(84081);\n script_version(\"2.6\");\n script_cvs_date(\"Date: 2018/07/31 17:27:54\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_bugtraq_id(74452);\n\n script_name(english:\"SUSE SLED11 / SLES11 Security Update : dnsmasq (SUSE-SU-2015:1015-1)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The DNS server dnsmasq was updated to fix one security issue and one\nnon-security bug :\n\nCVE-2015-3294: A remote unauthenticated attacker could have caused a\ndenial of service (DoS) or read memory from the heap, potentially\ndisclosing information such as performed DNS queries or encryption\nkeys. (bsc#928867)\n\nbsc#923144: When answer to an upstream query is a CNAME pointing to an\nA/AAAA record which is present locally (/etc/hosts), allow caching\nwhen the upstream and local A/AAAA records have the same value.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/923144\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/928867\"\n );\n # https://download.suse.com/patch/finder/?keywords=304ffac9847406592e7dae5b253b7965\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?d08e481b\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-3294.html\"\n );\n # https://www.suse.com/support/update/announcement/2015/suse-su-20151015-1.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?a1888979\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Server 11 SP3 for VMware :\n\nzypper in -t patch slessp3-dnsmasq=10650\n\nSUSE Linux Enterprise Server 11 SP3 :\n\nzypper in -t patch slessp3-dnsmasq=10650\n\nSUSE Linux Enterprise Desktop 11 SP3 :\n\nzypper in -t patch sledsp3-dnsmasq=10650\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:11\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/06/08\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/06/10\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLED11|SLES11)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLED11 / SLES11\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES11\" && (! ereg(pattern:\"^(3)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES11 SP3\", os_ver + \" SP\" + sp);\nif (os_ver == \"SLED11\" && (! ereg(pattern:\"^(3)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLED11 SP3\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES11\", sp:\"3\", reference:\"dnsmasq-2.71-0.12.13.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"3\", cpu:\"x86_64\", reference:\"dnsmasq-2.71-0.12.13.1\")) flag++;\nif (rpm_check(release:\"SLED11\", sp:\"3\", cpu:\"i586\", reference:\"dnsmasq-2.71-0.12.13.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq\");\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:51:02", "references": ["http://www.nessus.org/u?31750c64"], "pluginID": "99807", "description": "According to the versions of the dnsmasq package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :\n\n - Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with DHCP-allocated addresses to appear in the DNS with names configured either in each host or in a central configuration file. Dnsmasq supports static and dynamic DHCP leases and BOOTP for network booting of diskless machines.\n\n - Security Fix(es)\n\n - The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.(CVE-2015-3294)\n\nNote that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 12, "reporter": "Tenable", "published": "2017-05-01T00:00:00", "title": "EulerOS 2.0 SP1 : dnsmasq (EulerOS-SA-2016-1044)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Huawei Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-08-10T00:00:00", "cpe": ["p-cpe:/a:huawei:euleros:dnsmasq", "cpe:/o:huawei:euleros:2.0"], "id": "EULEROS_SA-2016-1044.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=99807", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(99807);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2018/08/10 15:55:07\");\n\n script_cve_id(\n \"CVE-2015-3294\"\n );\n script_bugtraq_id(\n 74452\n );\n\n script_name(english:\"EulerOS 2.0 SP1 : dnsmasq (EulerOS-SA-2016-1044)\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the versions of the dnsmasq package installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerabilities :\n\n - Dnsmasq is lightweight, easy to configure DNS forwarder\n and DHCP server. It is designed to provide DNS and,\n optionally, DHCP, to a small network. It can serve the\n names of local machines which are not in the global\n DNS. The DHCP server integrates with the DNS server and\n allows machines with DHCP-allocated addresses to appear\n in the DNS with names configured either in each host or\n in a central configuration file. Dnsmasq supports\n static and dynamic DHCP leases and BOOTP for network\n booting of diskless machines.\n\n - Security Fix(es)\n\n - The tcp_request function in Dnsmasq before 2.73rc4 does\n not properly handle the return value of the setup_reply\n function, which allows remote attackers to read process\n memory and cause a denial of service (out-of-bounds\n read and crash) via a malformed DNS\n request.(CVE-2015-3294)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # http://developer.huawei.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2016-1044\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?31750c64\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected dnsmasq packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/09/11\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/05/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2017-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n script_exclude_keys(\"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(1)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\");\n\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\", \"EulerOS UVP \" + uvp);\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\n\nflag = 0;\n\npkgs = [\"dnsmasq-2.66-12.h1\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"1\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq\");\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:58:26", "references": ["https://www.suse.com/security/cve/CVE-2015-3294.html", "http://www.nessus.org/u?326c0c06", "https://bugzilla.suse.com/923144", "https://bugzilla.suse.com/928867"], "pluginID": "83948", "description": "The DNS server dnsmasq was updated to fix one security issue and one non-security bug.\n\nThe following vulnerability was fixed :\n\n - CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service (DoS) or read heap memory, potentially disclosing information such as performed DNS queries or encryption keys. (bsc#928867)\n\nThe following bug was fixed :\n\n - bsc#923144: When answer to an upstream query is a CNAME pointing to an A/AAAA record which is present locally (/etc/hosts), allow caching when the upstream and local A/AAAA records have the same value.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 5, "reporter": "Tenable", "published": "2015-06-02T00:00:00", "title": "SUSE SLED12 / SLES12 Security Update : dnsmasq (SUSE-SU-2015:0979-1)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-07-31T00:00:00", "cpe": ["cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:dnsmasq", "p-cpe:/a:novell:suse_linux:dnsmasq-debuginfo", "p-cpe:/a:novell:suse_linux:dnsmasq-debugsource"], "id": "SUSE_SU-2015-0979-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=83948", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2015:0979-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83948);\n script_version(\"2.6\");\n script_cvs_date(\"Date: 2018/07/31 17:27:54\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_bugtraq_id(74452);\n\n script_name(english:\"SUSE SLED12 / SLES12 Security Update : dnsmasq (SUSE-SU-2015:0979-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The DNS server dnsmasq was updated to fix one security issue and one\nnon-security bug.\n\nThe following vulnerability was fixed :\n\n - CVE-2015-3294: A remote unauthenticated attacker could\n have caused a denial of service (DoS) or read heap\n memory, potentially disclosing information such as\n performed DNS queries or encryption keys. (bsc#928867)\n\nThe following bug was fixed :\n\n - bsc#923144: When answer to an upstream query is a CNAME\n pointing to an A/AAAA record which is present locally\n (/etc/hosts), allow caching when the upstream and local\n A/AAAA records have the same value.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/923144\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/928867\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-3294.html\"\n );\n # https://www.suse.com/support/update/announcement/2015/suse-su-20150979-1.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?326c0c06\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Server 12 :\n\nzypper in -t patch SUSE-SLE-SERVER-12-2015-229=1\n\nSUSE Linux Enterprise Desktop 12 :\n\nzypper in -t patch SUSE-SLE-DESKTOP-12-2015-229=1\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:dnsmasq-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:dnsmasq-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/04/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/06/02\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLED12|SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLED12 / SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! ereg(pattern:\"^(0)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP0\", os_ver + \" SP\" + sp);\nif (os_ver == \"SLED12\" && (! ereg(pattern:\"^(0)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLED12 SP0\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"dnsmasq-2.71-4.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"dnsmasq-debuginfo-2.71-4.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"dnsmasq-debugsource-2.71-4.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"dnsmasq-2.71-4.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"dnsmasq-debuginfo-2.71-4.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"0\", cpu:\"x86_64\", reference:\"dnsmasq-debugsource-2.71-4.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq\");\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-02T00:07:20", "references": ["https://packages.debian.org/source/jessie/dnsmasq", "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783459", "http://www.debian.org/security/2015/dsa-3251", "https://packages.debian.org/source/wheezy/dnsmasq"], "pluginID": "83253", "description": "Nick Sampanis discovered that dnsmasq, a small caching DNS proxy and DHCP/TFTP server, did not properly check the return value of the setup_reply() function called during a TCP connection, which is used then as a size argument in a function which writes data on the client's connection. A remote attacker could exploit this issue via a specially crafted DNS request to cause dnsmasq to crash, or potentially to obtain sensitive information from process memory.", "edition": 5, "reporter": "Tenable", "published": "2015-05-06T00:00:00", "title": "Debian DSA-3251-1 : dnsmasq - security update", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Debian Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-07-10T00:00:00", "cpe": ["cpe:/o:debian:debian_linux:8.0", "p-cpe:/a:debian:debian_linux:dnsmasq", "cpe:/o:debian:debian_linux:7.0"], "id": "DEBIAN_DSA-3251.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=83253", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-3251. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83253);\n script_version(\"2.5\");\n script_cvs_date(\"Date: 2018/07/10 14:27:31\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_bugtraq_id(74452);\n script_xref(name:\"DSA\", value:\"3251\");\n\n script_name(english:\"Debian DSA-3251-1 : dnsmasq - security update\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Nick Sampanis discovered that dnsmasq, a small caching DNS proxy and\nDHCP/TFTP server, did not properly check the return value of the\nsetup_reply() function called during a TCP connection, which is used\nthen as a size argument in a function which writes data on the\nclient's connection. A remote attacker could exploit this issue via a\nspecially crafted DNS request to cause dnsmasq to crash, or\npotentially to obtain sensitive information from process memory.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783459\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/wheezy/dnsmasq\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/jessie/dnsmasq\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.debian.org/security/2015/dsa-3251\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the dnsmasq packages.\n\nFor the oldstable distribution (wheezy), this problem has been fixed\nin version 2.62-3+deb7u2.\n\nFor the stable distribution (jessie), this problem has been fixed in\nversion 2.72-3+deb8u1.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:7.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:8.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/05/05\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/06\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"7.0\", prefix:\"dnsmasq\", reference:\"2.62-3+deb7u2\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"dnsmasq-base\", reference:\"2.62-3+deb7u2\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"dnsmasq-utils\", reference:\"2.62-3+deb7u2\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"dnsmasq\", reference:\"2.72-3+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"dnsmasq-base\", reference:\"2.72-3+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"dnsmasq-utils\", reference:\"2.72-3+deb8u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:deb_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:34:26", "references": ["https://bugzilla.opensuse.org/show_bug.cgi?id=928867"], "pluginID": "83398", "description": "The DNS server dnsmasq was updated to fix one security issue.\n\nThe following vulnerability was fixed :\n\n - CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service (DoS) or read heap memory, potentially disclosing information such as performed DNS queries or encryption keys. (bsc#928867)", "edition": 4, "reporter": "Tenable", "published": "2015-05-13T00:00:00", "title": "openSUSE Security Update : dnsmasq (openSUSE-2015-359)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2015-05-13T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:dnsmasq", "p-cpe:/a:novell:opensuse:dnsmasq-utils", "cpe:/o:novell:opensuse:13.2", "p-cpe:/a:novell:opensuse:dnsmasq-debugsource", "p-cpe:/a:novell:opensuse:dnsmasq-utils-debuginfo", "p-cpe:/a:novell:opensuse:dnsmasq-debuginfo", "cpe:/o:novell:opensuse:13.1"], "id": "OPENSUSE-2015-359.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=83398", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2015-359.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83398);\n script_version(\"$Revision: 2.1 $\");\n script_cvs_date(\"$Date: 2015/05/13 14:37:10 $\");\n\n script_cve_id(\"CVE-2015-3294\");\n\n script_name(english:\"openSUSE Security Update : dnsmasq (openSUSE-2015-359)\");\n script_summary(english:\"Check for the openSUSE-2015-359 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The DNS server dnsmasq was updated to fix one security issue.\n\nThe following vulnerability was fixed :\n\n - CVE-2015-3294: A remote unauthenticated attacker could\n have caused a denial of service (DoS) or read heap\n memory, potentially disclosing information such as\n performed DNS queries or encryption keys. (bsc#928867)\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=928867\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected dnsmasq packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:dnsmasq-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:dnsmasq-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:dnsmasq-utils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:dnsmasq-utils-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:13.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:13.2\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/04/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE13\\.1|SUSE13\\.2)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"13.1 / 13.2\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE13.1\", reference:\"dnsmasq-2.65-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"dnsmasq-debuginfo-2.65-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"dnsmasq-debugsource-2.65-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"dnsmasq-utils-2.65-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"dnsmasq-utils-debuginfo-2.65-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.2\", reference:\"dnsmasq-2.71-3.4.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.2\", reference:\"dnsmasq-debuginfo-2.71-3.4.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.2\", reference:\"dnsmasq-debugsource-2.71-3.4.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.2\", reference:\"dnsmasq-utils-2.71-3.4.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.2\", reference:\"dnsmasq-utils-debuginfo-2.71-3.4.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq / dnsmasq-debuginfo / dnsmasq-debugsource / dnsmasq-utils / etc\");\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:33:41", "references": ["http://www.nessus.org/u?b4aa1400", "http://www.nessus.org/u?32e59a15", "http://www.nessus.org/u?3f9bf0a1"], "pluginID": "83793", "description": "Nick Sampanis reported a potential memory exposure and denial of service vulnerability against dnsmasq 2.72. The CVE entry summarizes this as :\n\nThe tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.'", "edition": 4, "reporter": "Tenable", "published": "2015-05-26T00:00:00", "title": "FreeBSD : dnsmasq -- data exposure and denial of service (37569eb7-0125-11e5-9d98-080027ef73ec)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "FreeBSD Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2015-05-26T00:00:00", "cpe": ["cpe:/o:freebsd:freebsd", "p-cpe:/a:freebsd:freebsd:dnsmasq", "p-cpe:/a:freebsd:freebsd:dnsmasq-devel"], "id": "FREEBSD_PKG_37569EB7012511E59D98080027EF73EC.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=83793", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the FreeBSD VuXML database :\n#\n# Copyright 2003-2015 Jacques Vidrine and contributors\n#\n# Redistribution and use in source (VuXML) and 'compiled' forms (SGML,\n# HTML, PDF, PostScript, RTF and so forth) with or without modification,\n# are permitted provided that the following conditions are met:\n# 1. Redistributions of source code (VuXML) must retain the above\n# copyright notice, this list of conditions and the following\n# disclaimer as the first lines of this file unmodified.\n# 2. Redistributions in compiled form (transformed to other DTDs,\n# published online in any format, converted to PDF, PostScript,\n# RTF and other formats) must reproduce the above copyright\n# notice, this list of conditions and the following disclaimer\n# in the documentation and/or other materials provided with the\n# distribution.\n# \n# THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS \"AS IS\"\n# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,\n# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\n# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS\n# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,\n# OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT\n# OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR\n# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,\n# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE\n# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,\n# EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(83793);\n script_version(\"$Revision: 2.1 $\");\n script_cvs_date(\"$Date: 2015/05/26 13:52:13 $\");\n\n script_cve_id(\"CVE-2015-3294\");\n\n script_name(english:\"FreeBSD : dnsmasq -- data exposure and denial of service (37569eb7-0125-11e5-9d98-080027ef73ec)\");\n script_summary(english:\"Checks for updated packages in pkg_info output\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote FreeBSD host is missing one or more security-related\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Nick Sampanis reported a potential memory exposure and denial of\nservice vulnerability against dnsmasq 2.72. The CVE entry summarizes\nthis as :\n\nThe tcp_request function in Dnsmasq before 2.73rc4 does not properly\nhandle the return value of the setup_reply function, which allows\nremote attackers to read process memory and cause a denial of service\n(out-of-bounds read and crash) via a malformed DNS request.'\"\n );\n # http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2015q2/009382.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?32e59a15\"\n );\n # http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=ad4a8ff7d9097008d7623df8543df435bfddeac8\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?3f9bf0a1\"\n );\n # http://www.freebsd.org/ports/portaudit/37569eb7-0125-11e5-9d98-080027ef73ec.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?b4aa1400\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:dnsmasq-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:freebsd:freebsd\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/04/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/05/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/05/26\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015 Tenable Network Security, Inc.\");\n script_family(english:\"FreeBSD Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/FreeBSD/release\", \"Host/FreeBSD/pkg_info\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"freebsd_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/FreeBSD/release\")) audit(AUDIT_OS_NOT, \"FreeBSD\");\nif (!get_kb_item(\"Host/FreeBSD/pkg_info\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (pkg_test(save_report:TRUE, pkg:\"dnsmasq<2.72_1\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"dnsmasq-devel<2.73rc4\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:pkg_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:35:35", "references": ["http://www.thekelleys.org.uk/dnsmasq/CHANGELOG", "http://www.nessus.org/u?3c7d3afa"], "pluginID": "87596", "description": "The remote dnsmasq server is running a version prior to 2.73rc4. It is, therefore, affected by an information disclosure vulnerability due not properly checking the return value from the setup_reply() function during TCP connections. An unauthenticated, remote attacker can exploit this to disclose sensitive information.", "edition": 5, "reporter": "Tenable", "published": "2015-12-22T00:00:00", "title": "dnsmasq < 2.73rc4 setup_reply() Function Return Value Checking Information Disclosure", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "DNS", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-07-10T00:00:00", "cpe": ["cpe:/a:thekelleys:dnsmasq"], "id": "DNSMASQ_DOS-CVE-2015-3294.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=87596", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(87596);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/07/10 14:27:31\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_bugtraq_id(74452);\n\n script_name(english:\"dnsmasq < 2.73rc4 setup_reply() Function Return Value Checking Information Disclosure\");\n script_summary(english:\"Checks the version of dnsmasq.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote DNS / DHCP service is affected by an information disclosure\nvulnerability.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote dnsmasq server is running a version prior to 2.73rc4. It\nis, therefore, affected by an information disclosure vulnerability due\nnot properly checking the return value from the setup_reply() function\nduring TCP connections. An unauthenticated, remote attacker can\nexploit this to disclose sensitive information.\");\n # http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=ad4a8ff7d9097008d7623df8543df435bfddeac8\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?3c7d3afa\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to dnsmasq 2.73rc4 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/04/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/04/09\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/12/22\");\n\n script_set_attribute(attribute:\"potential_vulnerability\", value:\"true\");\n script_set_attribute(attribute:\"plugin_type\", value:\"remote\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:thekelleys:dnsmasq\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"DNS\");\n\n script_dependencie(\"dns_version.nasl\");\n script_require_keys(\"dns_server/version\", \"Settings/ParanoidReport\");\n script_require_ports(\"Services/dns\", 53);\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"global_settings.inc\");\n\napp_name = \"dnsmasq\";\n\nport = get_kb_item(\"Services/udp/dns\");\nif (!port) port = 53;\n\nif (report_paranoia < 2) audit(AUDIT_PARANOID);\n\nversion = get_kb_item_or_exit(\"dns_server/version\");\nversion = tolower(version);\n\nif (version !~ \"dnsmasq-(v)?\")\n\taudit(AUDIT_NOT_LISTEN, app_name, port);\n\nif (version =~ \"^dnsmasq-(v)?([0-9\\.][01]+|[0-2]\\.)([0-7]|[0-7][0-2]|[0-6][0-9]|[0-6][0-9](test[0-9][0-9]|rc[0-6])|[0-7][0-3](test[0-6]|rc[0-3]))$\")\n{\n if (report_verbosity > 0)\n {\n report =\n '\\n Installed version : ' + version +\n '\\n Fixed version : dnsmasq-2.73rc4' +\n '\\n';\n\n security_warning(port:port, proto:\"udp\", extra:report);\n }\n else security_warning(port:port, proto:\"udp\");\n}\nelse audit(AUDIT_INST_VER_NOT_VULN, app_name, version);\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:41:06", "references": ["https://security.gentoo.org/glsa/201512-01"], "pluginID": "87484", "description": "The remote host is affected by the vulnerability described in GLSA-201512-01 (Dnsmasq: Denial of Service)\n\n An out-of-bounds read vulnerability has been found in the tcp_request function in Dnsmasq.\n Impact :\n\n A remote attacker could send a specially crafted DNS request, possibly resulting in a Denial of Service condition.\n Workaround :\n\n There is no known workaround at this time.", "edition": 4, "reporter": "Tenable", "published": "2015-12-18T00:00:00", "title": "GLSA-201512-01 : Dnsmasq: Denial of Service", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2015-12-18T00:00:00", "cpe": ["cpe:/o:gentoo:linux", "p-cpe:/a:gentoo:linux:dnsmasq"], "id": "GENTOO_GLSA-201512-01.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=87484", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Gentoo Linux Security Advisory GLSA 201512-01.\n#\n# The advisory text is Copyright (C) 2001-2015 Gentoo Foundation, Inc.\n# and licensed under the Creative Commons - Attribution / Share Alike \n# license. See http://creativecommons.org/licenses/by-sa/3.0/\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(87484);\n script_version(\"$Revision: 2.1 $\");\n script_cvs_date(\"$Date: 2015/12/18 16:10:58 $\");\n\n script_cve_id(\"CVE-2015-3294\");\n script_xref(name:\"GLSA\", value:\"201512-01\");\n\n script_name(english:\"GLSA-201512-01 : Dnsmasq: Denial of Service\");\n script_summary(english:\"Checks for updated package(s) in /var/db/pkg\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Gentoo host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is affected by the vulnerability described in GLSA-201512-01\n(Dnsmasq: Denial of Service)\n\n An out-of-bounds read vulnerability has been found in the tcp_request\n function in Dnsmasq.\n \nImpact :\n\n A remote attacker could send a specially crafted DNS request, possibly\n resulting in a Denial of Service condition.\n \nWorkaround :\n\n There is no known workaround at this time.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security.gentoo.org/glsa/201512-01\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"All Dnsmasq users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose '>=net-dns/dnsmasq-2.72-r2'\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:gentoo:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/12/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/12/18\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015 Tenable Network Security, Inc.\");\n script_family(english:\"Gentoo Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Gentoo/release\", \"Host/Gentoo/qpkg-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"qpkg.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Gentoo/release\")) audit(AUDIT_OS_NOT, \"Gentoo\");\nif (!get_kb_item(\"Host/Gentoo/qpkg-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (qpkg_check(package:\"net-dns/dnsmasq\", unaffected:make_list(\"ge 2.72-r2\"), vulnerable:make_list(\"lt 2.72-r2\"))) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:qpkg_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = qpkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"Dnsmasq\");\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-02T00:09:29", "references": ["https://www.suse.com/security/cve/CVE-2015-3294.html", "https://www.suse.com/security/cve/CVE-2017-14495.html", "https://bugzilla.suse.com/1060362", "https://www.suse.com/security/cve/CVE-2017-14491.html", "https://www.suse.com/security/cve/CVE-2017-14496.html", "https://bugzilla.suse.com/1060355", "https://bugzilla.suse.com/1060361", "https://bugzilla.suse.com/1060364", "https://www.suse.com/security/cve/CVE-2017-14494.html", "https://www.suse.com/security/cve/CVE-2017-14493.html", "https://www.suse.com/security/cve/CVE-2017-14492.html", "http://www.nessus.org/u?e9214304", "https://bugzilla.suse.com/1060360", "https://bugzilla.suse.com/1060354", "https://www.suse.com/security/cve/CVE-2015-8899.html"], "pluginID": "103640", "description": "This update for dnsmasq fixes the following security issues :\n\n - CVE-2017-14491: 2 byte heap based overflow.\n [bsc#1060354]\n\n - CVE-2017-14492: heap based overflow. [bsc#1060355]\n\n - CVE-2017-14493: stack based overflow. [bsc#1060360]\n\n - CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n\n - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n\n - CVE-2017-14496: DNS - DoS Integer underflow.\n [bsc#1060364] This update brings a (small) potential incompatibility in the handling of 'basename' in\n --pxe-service. Please read the CHANGELOG and the documentation if you are using this option.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 14, "reporter": "Tenable", "published": "2017-10-03T00:00:00", "title": "SUSE SLES11 Security Update : dnsmasq (SUSE-SU-2017:2619-1)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-14496", "CVE-2017-14494", "CVE-2017-14492", "CVE-2015-8899", "CVE-2017-14491", "CVE-2017-14493", "CVE-2017-14495", "CVE-2015-3294"], "modified": "2018-08-01T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:dnsmasq", "cpe:/o:novell:suse_linux:11"], "id": "SUSE_SU-2017-2619-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=103640", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2017:2619-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(103640);\n script_version(\"3.10\");\n script_cvs_date(\"Date: 2018/08/01 17:36:13\");\n\n script_cve_id(\"CVE-2015-3294\", \"CVE-2015-8899\", \"CVE-2017-14491\", \"CVE-2017-14492\", \"CVE-2017-14493\", \"CVE-2017-14494\", \"CVE-2017-14495\", \"CVE-2017-14496\");\n script_bugtraq_id(74452);\n script_xref(name:\"IAVA\", value:\"2017-A-0284\");\n\n script_name(english:\"SUSE SLES11 Security Update : dnsmasq (SUSE-SU-2017:2619-1)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for dnsmasq fixes the following security issues :\n\n - CVE-2017-14491: 2 byte heap based overflow.\n [bsc#1060354]\n\n - CVE-2017-14492: heap based overflow. [bsc#1060355]\n\n - CVE-2017-14493: stack based overflow. [bsc#1060360]\n\n - CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n\n - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n\n - CVE-2017-14496: DNS - DoS Integer underflow.\n [bsc#1060364] This update brings a (small) potential\n incompatibility in the handling of 'basename' in\n --pxe-service. Please read the CHANGELOG and the\n documentation if you are using this option.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/1060354\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/1060355\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/1060360\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/1060361\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/1060362\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/1060364\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-3294.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-8899.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-14491.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-14492.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-14493.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-14494.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-14495.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-14496.html\"\n );\n # https://www.suse.com/support/update/announcement/2017/suse-su-20172619-1.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?e9214304\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Server 11-SP4:zypper in -t patch\nslessp4-dnsmasq-13294=1\n\nSUSE Linux Enterprise Debuginfo 11-SP4:zypper in -t patch\ndbgsp4-dnsmasq-13294=1\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:dnsmasq\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:11\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/10/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/10/03\");\n script_set_attribute(attribute:\"stig_severity\", value:\"I\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2018 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLES11)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLES11\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES11\" && (! ereg(pattern:\"^(4)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES11 SP4\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES11\", sp:\"4\", reference:\"dnsmasq-2.78-0.17.5.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"dnsmasq\");\n}\n", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "freebsd": [{"lastseen": "2018-08-31T01:14:41", "references": ["http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=ad4a8ff7d9097008d7623df8543df435bfddeac8", "http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2015q2/009382.html"], "affectedPackage": [{"OS": "FreeBSD", "OSVersion": "any", "packageVersion": "2.72_1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "dnsmasq", "operator": "lt"}, {"OS": "FreeBSD", "OSVersion": "any", "packageVersion": "2.73rc4", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "dnsmasq-devel", "operator": "lt"}], "description": "\nNick Sampanis reported a potential memory exposure and denial of service vulnerability against dnsmasq 2.72. The CVE entry summarizes this as:\n\t\nThe tcp_request function in Dnsmasq before 2.73rc4\n\t does not properly handle the return value of the setup_reply function,\n\t which allows remote attackers to read process memory and cause a\n\t denial of service (out-of-bounds read and crash) via a malformed DNS\n\t request.\"\n\n", "edition": 3, "reporter": "FreeBSD", "published": "2015-04-07T00:00:00", "title": "dnsmasq -- data exposure and denial of service", "type": "freebsd", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "bulletinFamily": "unix", "cvelist": ["CVE-2015-3294"], "modified": "2015-04-07T00:00:00", "id": "37569EB7-0125-11E5-9D98-080027EF73EC", "href": "https://vuxml.freebsd.org/freebsd/37569eb7-0125-11e5-9d98-080027ef73ec.html", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}], "openvas": [{"lastseen": "2017-07-24T12:52:31", "references": ["http://www.debian.org/security/2015/dsa-3251.html"], "pluginID": "703251", "description": "Nick Sampanis discovered that dnsmasq,\na small caching DNS proxy and DHCP/TFTP server, did not properly check the return\nvalue of the setup_reply() function called during a TCP connection, which is used\nthen as a size argument in a function which writes data on the client", "edition": 2, "reporter": "Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net", "published": "2015-05-05T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "title": "Debian Security Advisory DSA 3251-1 (dnsmasq - security update)", "type": "openvas", "naslFamily": "Debian Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2017-07-07T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=703251", "id": "OPENVAS:703251", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3251.nasl 6609 2017-07-07 12:05:59Z cfischer $\n# Auto-generated from advisory DSA 3251-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\n\nif(description)\n{\n script_id(703251);\n script_version(\"$Revision: 6609 $\");\n script_cve_id(\"CVE-2015-3294\");\n script_name(\"Debian Security Advisory DSA 3251-1 (dnsmasq - security update)\");\n script_tag(name: \"last_modification\", value: \"$Date: 2017-07-07 14:05:59 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name: \"creation_date\", value: \"2015-05-05 00:00:00 +0200 (Tue, 05 May 2015)\");\n script_tag(name:\"cvss_base\", value:\"6.4\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_tag(name: \"solution_type\", value: \"VendorFix\");\n script_tag(name: \"qod_type\", value: \"package\");\n\n script_xref(name: \"URL\", value: \"http://www.debian.org/security/2015/dsa-3251.html\");\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name: \"affected\", value: \"dnsmasq on Debian Linux\");\n script_tag(name: \"insight\", value: \"Dnsmasq is a lightweight, easy to\nconfigure, DNS forwarder and DHCP server. It is designed to provide DNS and\noptionally, DHCP, to a small network. It can serve the names of local machines\nwhich are not in the global DNS. The DHCP server integrates with the DNS\nserver and allows machines with DHCP-allocated addresses\nto appear in the DNS with names configured either in each host or\nin a central configuration file. Dnsmasq supports static and dynamic\nDHCP leases and BOOTP/TFTP for network booting of diskless machines.\");\n script_tag(name: \"solution\", value: \"For the oldstable distribution\n(wheezy), this problem has been fixed in version 2.62-3+deb7u2.\n\nFor the stable distribution (jessie), this problem has been fixed in\nversion 2.72-3+deb8u1.\n\nFor the testing distribution (stretch) and the unstable distribution\n(sid), this problem will be fixed soon.\n\nWe recommend that you upgrade your dnsmasq packages.\");\n script_tag(name: \"summary\", value: \"Nick Sampanis discovered that dnsmasq,\na small caching DNS proxy and DHCP/TFTP server, did not properly check the return\nvalue of the setup_reply() function called during a TCP connection, which is used\nthen as a size argument in a function which writes data on the client's\nconnection. A remote attacker could exploit this issue via a specially\ncrafted DNS request to cause dnsmasq to crash, or potentially to obtain\nsensitive information from process memory.\");\n script_tag(name: \"vuldetect\", value: \"This check tests the installed software\nversion using the apt package manager.\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"dnsmasq\", ver:\"2.62-3+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"dnsmasq-base\", ver:\"2.62-3+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"dnsmasq-utils\", ver:\"2.62-3+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-28T18:23:29", "references": ["https://security.gentoo.org/glsa/201512-01"], "pluginID": "1361412562310121423", "description": "Gentoo Linux Local Security Checks https://security.gentoo.org/glsa/201512-01", "edition": 6, "reporter": "Eero Volotinen", "published": "2015-12-18T00:00:00", "title": "Gentoo Security Advisory GLSA 201512-01", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 2.1}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-09-28T00:00:00", "id": "OPENVAS:1361412562310121423", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310121423", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: glsa-201512-01.nasl 11671 2018-09-28 10:44:05Z cfischer $\n#\n# Gentoo Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.121423\");\n script_version(\"$Revision: 11671 $\");\n script_tag(name:\"creation_date\", value:\"2015-12-18 08:24:32 +0200 (Fri, 18 Dec 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 12:44:05 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Gentoo Security Advisory GLSA 201512-01\");\n script_tag(name:\"insight\", value:\"An out-of-bounds read vulnerability has been found in the tcp_request function in Dnsmasq.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://security.gentoo.org/glsa/201512-01\");\n script_cve_id(\"CVE-2015-3294\");\n script_tag(name:\"cvss_base\", value:\"6.4\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/gentoo\", \"ssh/login/pkg\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Gentoo Linux Local Security Checks https://security.gentoo.org/glsa/201512-01\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Gentoo Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-gentoo.inc\");\n\nres = \"\";\nreport = \"\";\n\nif((res=ispkgvuln(pkg:\"net-dns/dnsmasq\", unaffected: make_list(\"ge 2.72-r2\"), vulnerable: make_list(\"lt 2.72-r2\"))) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99);\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:52:39", "references": ["http://www.debian.org/security/2015/dsa-3251.html"], "pluginID": "1361412562310703251", "description": "Nick Sampanis discovered that dnsmasq,\na small caching DNS proxy and DHCP/TFTP server, did not properly check the return\nvalue of the setup_reply() function called during a TCP connection, which is used\nthen as a size argument in a function which writes data on the client", "edition": 3, "reporter": "Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net", "published": "2015-05-05T00:00:00", "title": "Debian Security Advisory DSA 3251-1 (dnsmasq - security update)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Debian Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-04-06T00:00:00", "id": "OPENVAS:1361412562310703251", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310703251", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3251.nasl 9355 2018-04-06 07:16:07Z cfischer $\n# Auto-generated from advisory DSA 3251-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.703251\");\n script_version(\"$Revision: 9355 $\");\n script_cve_id(\"CVE-2015-3294\");\n script_name(\"Debian Security Advisory DSA 3251-1 (dnsmasq - security update)\");\n script_tag(name: \"last_modification\", value: \"$Date: 2018-04-06 09:16:07 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name: \"creation_date\", value: \"2015-05-05 00:00:00 +0200 (Tue, 05 May 2015)\");\n script_tag(name:\"cvss_base\", value:\"6.4\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_tag(name: \"solution_type\", value: \"VendorFix\");\n script_tag(name: \"qod_type\", value: \"package\");\n\n script_xref(name: \"URL\", value: \"http://www.debian.org/security/2015/dsa-3251.html\");\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name: \"affected\", value: \"dnsmasq on Debian Linux\");\n script_tag(name: \"insight\", value: \"Dnsmasq is a lightweight, easy to\nconfigure, DNS forwarder and DHCP server. It is designed to provide DNS and\noptionally, DHCP, to a small network. It can serve the names of local machines\nwhich are not in the global DNS. The DHCP server integrates with the DNS\nserver and allows machines with DHCP-allocated addresses\nto appear in the DNS with names configured either in each host or\nin a central configuration file. Dnsmasq supports static and dynamic\nDHCP leases and BOOTP/TFTP for network booting of diskless machines.\");\n script_tag(name: \"solution\", value: \"For the oldstable distribution\n(wheezy), this problem has been fixed in version 2.62-3+deb7u2.\n\nFor the stable distribution (jessie), this problem has been fixed in\nversion 2.72-3+deb8u1.\n\nFor the testing distribution (stretch) and the unstable distribution\n(sid), this problem will be fixed soon.\n\nWe recommend that you upgrade your dnsmasq packages.\");\n script_tag(name: \"summary\", value: \"Nick Sampanis discovered that dnsmasq,\na small caching DNS proxy and DHCP/TFTP server, did not properly check the return\nvalue of the setup_reply() function called during a TCP connection, which is used\nthen as a size argument in a function which writes data on the client's\nconnection. A remote attacker could exploit this issue via a specially\ncrafted DNS request to cause dnsmasq to crash, or potentially to obtain\nsensitive information from process memory.\");\n script_tag(name: \"vuldetect\", value: \"This check tests the installed software\nversion using the apt package manager.\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"dnsmasq\", ver:\"2.62-3+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"dnsmasq-base\", ver:\"2.62-3+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"dnsmasq-utils\", ver:\"2.62-3+deb7u2\", rls_regex:\"DEB7.[0-9]\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:49:44", "references": ["2593-1", "http://www.ubuntu.com/usn/usn-2593-1/"], "pluginID": "1361412562310842192", "description": "Check the version of dnsmasq", "edition": 8, "reporter": "Copyright (C) 2015 Greenbone Networks GmbH", "published": "2015-05-05T00:00:00", "title": "Ubuntu Update for dnsmasq USN-2593-1", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Ubuntu Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-3294"], "modified": "2018-08-17T00:00:00", "id": "OPENVAS:1361412562310842192", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310842192", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Ubuntu Update for dnsmasq USN-2593-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.842192\");\n script_version(\"$Revision: 11037 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-08-17 13:51:16 +0200 (Fri, 17 Aug 2018) $\");\n script_tag(name:\"creation_date\", value:\"2015-05-05 06:13:58 +0200 (Tue, 05 May 2015)\");\n script_cve_id(\"CVE-2015-3294\");\n script_tag(name:\"cvss_base\", value:\"6.4\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for dnsmasq USN-2593-1\");\n script_tag(name:\"summary\", value:\"Check the version of dnsmasq\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Nick Sampanis discovered that Dnsmasq\nincorrectly handled certain malformed DNS requests. A remote attacker could use\nthis issue to cause Dnsmasq to crash, resulting in a denial of service, or\npossibly obtain sensitive information.\");\n script_tag(name:\"affected\", value:\"dnsmasq on Ubuntu 14.10,\n Ubuntu 14.04 LTS,\n Ubuntu 12.04 LTS\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n script_xref(name:\"USN\", value:\"2593-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-2593-1/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU(14\\.10|14\\.04 LTS|12\\.04 LTS)\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"UBUNTU14.10\")\n{\n\n if ((res = isdpkgvuln(pkg:\"dnsmasq-base\", ver:\"2.71-1ubuntu0.1\", rls:\"UBUNTU14.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"dnsmasq-base\", ver:\"2.68-1ubuntu0.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU12.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"dnsmasq\", ver:\"2.59-4ubuntu0.2\", rls:\"UBUNTU12.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"dnsmasq-base\", ver:\"2.59-4ubuntu0.2\", rls:\"UBUNTU12.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"dnsmasq-utils\", ver:\"2.59-4ubuntu0.2\", rls:\"UBUNTU12.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}], "debian": [{"lastseen": "2018-10-16T22:14:19", "references": [], "affectedPackage": [{"OS": "Debian", "OSVersion": "6", "packageVersion": "2.55-2+deb6u1", "arch": "all", "packageFilename": "dnsmasq-base_2.55-2+deb6u1_all.deb", "packageName": "dnsmasq-base", "operator": "lt"}, {"OS": "Debian", "OSVersion": "6", "packageVersion": "2.55-2+deb6u1", "arch": "all", "packageFilename": "dnsmasq_2.55-2+deb6u1_all.deb", "packageName": "dnsmasq", "operator": "lt"}], "description": "Package : dnsmasq\nVersion : 2.55-2+deb6u1\nCVE ID : CVE-2015-3294\nDebian Bug : 783459\n\nThe following vulnerability vulnerability was found in dnsmasq:\n\nCVE-2015-3294\n\n Remote attackers could read process memory and cause DoS via\n malformed DNS requests.\n\nFor Debian 6 \u201cSqueeze\u201d, these issues have been fixed in dnsmasq version\n2.55-2+deb6u1.\n", "edition": 1, "reporter": "Debian", "published": "2015-05-20T20:44:16", "title": "[SECURITY] [DLA 225-1] dnsmasq security update", "type": "debian", "enchantments": {"score": {"modified": "2018-10-16T22:14:19", "vector": "NONE", "value": 5.0}}, "bulletinFamily": "unix", "cvelist": ["CVE-2015-3294"], "modified": "2015-05-20T20:44:16", "id": "DEBIAN:DLA-225-1:C0A5B", "href": "https://lists.debian.org/debian-lts-announce/2015/debian-lts-announce-201505/msg00009.html", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-10-18T13:48:27", "references": [], "affectedPackage": [{"OS": "Debian", "OSVersion": "8", "packageVersion": "2.72-3+deb8u1", "arch": "all", "packageFilename": "dnsmasq_2.72-3+deb8u1_all.deb", "packageName": "dnsmasq", "operator": "lt"}, {"OS": "Debian", "OSVersion": "7", "packageVersion": "2.62-3+deb7u2", "arch": "all", "packageFilename": "dnsmasq_2.62-3+deb7u2_all.deb", "packageName": "dnsmasq", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "2.72-3+deb8u1", "arch": "all", "packageFilename": "dnsmasq-utils_2.72-3+deb8u1_all.deb", "packageName": "dnsmasq-utils", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "2.72-3+deb8u1", "arch": "all", "packageFilename": "dnsmasq-base_2.72-3+deb8u1_all.deb", "packageName": "dnsmasq-base", "operator": "lt"}], "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-3251-1 security@debian.org\nhttp://www.debian.org/security/ Salvatore Bonaccorso\nMay 05, 2015 http://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : dnsmasq\nCVE ID : CVE-2015-3294\nDebian Bug : 783459\n\nNick Sampanis discovered that dnsmasq, a small caching DNS proxy and\nDHCP/TFTP server, did not properly check the return value of the\nsetup_reply() function called during a TCP connection, which is used\nthen as a size argument in a function which writes data on the client&#x27;s\nconnection. A remote attacker could exploit this issue via a specially\ncrafted DNS request to cause dnsmasq to crash, or potentially to obtain\nsensitive information from process memory.\n\nFor the oldstable distribution (wheezy), this problem has been fixed\nin version 2.62-3+deb7u2.\n\nFor the stable distribution (jessie), this problem has been fixed in\nversion 2.72-3+deb8u1.\n\nFor the testing distribution (stretch) and the unstable distribution\n(sid), this problem will be fixed soon.\n\nWe recommend that you upgrade your dnsmasq packages.\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n", "edition": 2, "reporter": "Debian", "published": "2015-05-05T15:39:55", "title": "[SECURITY] [DSA 3251-1] dnsmasq security update", "type": "debian", "enchantments": {"score": {"modified": "2018-10-18T13:48:27", "vector": "NONE", "value": 5.0}}, "bulletinFamily": "unix", "cvelist": ["CVE-2015-3294"], "modified": "2015-05-05T15:39:55", "id": "DEBIAN:DSA-3251-1:BF259", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2015/msg00139.html", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}], "securityvulns": [{"lastseen": "2018-08-31T11:10:00", "references": ["https://vulners.com/securityvulns/securityvulns:doc:31957", "https://vulners.com/securityvulns/securityvulns:doc:32005"], "description": "Uninitilized memory dereference on DNS request parsing.", "edition": 1, "reporter": "BUGTRAQ", "published": "2015-05-05T00:00:00", "title": "dnsmasq uninitialized memory dereference", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:10:00", "vector": "NONE", "value": 7.2}}, "bulletinFamily": "software", "affectedSoftware": [{"name": "dnsmasq", "version": "2.73", "operator": "eq"}], "cvelist": ["CVE-2015-3294"], "modified": "2015-05-05T00:00:00", "id": "SECURITYVULNS:VULN:14423", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14423", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-08-31T11:10:58", "references": [], "description": "\r\n\r\n&quot;Dnsmasq 2.72 Unchecked returned value&quot;\r\n\r\nDescription\r\n------------------------------------------------------------\r\nDnsmasq does not properly check the return value of the setup_reply&#40;&#41;\r\nfunction called during a tcp connection &#40;by the tcp_request&#40;&#41; function&#41;.\r\nThis return value is then used as a size argument in a function which writes\r\ndata on the client&#39;s connection. This may lead, upon successful\r\nexploitation, to reading the heap memory of dnsmasq.\r\n \r\nIn more detail:\r\nFunction tcp_request&#40;&#41; calls setup_reply&#40;&#41; and the returned value is used as\r\na size argument in a write function.\r\n \r\nm = setup_reply&#40;header, &#40;unsigned int&#41;size, addrp, flags,\r\ndaemon-&gt;local_ttl&#41;;\r\nread_write&#40;confd, packet, m + sizeof&#40;u16&#41;, 0&#41;&#41;;\r\n \r\nThe m variable is determined by a subtraction between the\r\nreturn of skip_questions&#40;&#41; and header pointer.\r\nThe return value of skip_question doesn&#39;t checked for error&#40;NULL&#41;.\r\nAs a result the negative value of pointer&#40;-header&#41;, might returned.\r\n \r\nsize_t setup_reply&#40;struct dns_header *header, size_t qlen,\r\nstruct all_addr *addrp, unsigned int flags, unsigned long ttl&#41;\r\n{\r\n unsigned char *p = skip_questions&#40;header, qlen&#41;\r\n return p - &#40;unsigned char *&#41;header\r\n}\r\n \r\nread_write checks if the size argument is positive. In case of a 32 bit\r\nsystem\r\nsize_t m would be 4 bytes and read_write will automatically exit. In case of\r\n64\r\nbit system size_t m is 8 bytes and may turn to positive if the sign bit of\r\nthe\r\n32 bit value is 0.\r\n \r\nIf m is less than 0xffffffff80000000, dnsmasq will be exploited by a\r\npotential attacker who will remotely read dnsmasq heap. If the above\r\ncondition is not met, dnsmasq exits properly.\r\n\r\nResearcher\r\n------------------------------------------------------------\r\nNick Sampanis &#40;n.sampanis[a t]obrela[do t]com&#41;\r\n\r\n\r\nVulnerability\r\n------------------------------------------------------------\r\nUnchecked return value CVE-2015-3294\r\n\r\nIdentification date:\r\n------------------------------------------------------------\r\n07/04/2015 - 09/04/2015\r\n\r\nSolution - fix &amp; patch\r\n------------------------------------------------------------\r\nPlease download dnsmasq-2.73rc4.tar.gz\r\n\r\nReference:\r\n------------------------------------------------------------\r\nhttp://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2015q2/009382.html\r\nhttps://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1502/\r\n\r\n", "edition": 1, "reporter": "Securityvulns", "published": "2015-05-05T00:00:00", "title": "Dnsmasq 2.72 Unchecked returned value", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:10:58", "vector": "NONE", "value": 5.0}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2015-3294"], "modified": "2015-05-05T00:00:00", "id": "SECURITYVULNS:DOC:32005", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32005", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2018-08-31T11:10:58", "references": [], "description": "\r\n\r\n==========================================================================\r\nUbuntu Security Notice USN-2593-1\r\nMay 04, 2015\r\n\r\ndnsmasq vulnerability\r\n==========================================================================\r\n\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\n\r\n- Ubuntu 15.04\r\n- Ubuntu 14.10\r\n- Ubuntu 14.04 LTS\r\n- Ubuntu 12.04 LTS\r\n\r\nSummary:\r\n\r\nDnsmasq could be made to crash or expose sensitive information if it\r\nreceived specially crafted network traffic.\r\n\r\nSoftware Description:\r\n- dnsmasq: Small caching DNS proxy and DHCP/TFTP server\r\n\r\nDetails:\r\n\r\nNick Sampanis discovered that Dnsmasq incorrectly handled certain malformed\r\nDNS requests. A remote attacker could use this issue to cause Dnsmasq to\r\ncrash, resulting in a denial of service, or possibly obtain sensitive\r\ninformation.\r\n\r\nUpdate instructions:\r\n\r\nThe problem can be corrected by updating your system to the following\r\npackage versions:\r\n\r\nUbuntu 15.04:\r\n dnsmasq-base 2.72-3ubuntu0.1\r\n\r\nUbuntu 14.10:\r\n dnsmasq-base 2.71-1ubuntu0.1\r\n\r\nUbuntu 14.04 LTS:\r\n dnsmasq-base 2.68-1ubuntu0.1\r\n\r\nUbuntu 12.04 LTS:\r\n dnsmasq 2.59-4ubuntu0.2\r\n dnsmasq-base 2.59-4ubuntu0.2\r\n dnsmasq-utils 2.59-4ubuntu0.2\r\n\r\nAfter a standard system update you need to reboot your computer to make\r\nall the necessary changes.\r\n\r\nReferences:\r\n http://www.ubuntu.com/usn/usn-2593-1\r\n CVE-2015-3294\r\n\r\nPackage Information:\r\n https://launchpad.net/ubuntu/+source/dnsmasq/2.72-3ubuntu0.1\r\n https://launchpad.net/ubuntu/+source/dnsmasq/2.71-1ubuntu0.1\r\n https://launchpad.net/ubuntu/+source/dnsmasq/2.68-1ubuntu0.1\r\n https://launchpad.net/ubuntu/+source/dnsmasq/2.59-4ubuntu0.2\r\n\r\n\r\n\r\n\r\n-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce\r\n\r\n", "edition": 1, "reporter": "Securityvulns", "published": "2015-05-04T00:00:00", "title": "[USN-2593-1] Dnsmasq vulnerability", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:10:58", "vector": "NONE", "value": 5.0}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2015-3294"], "modified": "2015-05-04T00:00:00", "id": "SECURITYVULNS:DOC:31957", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31957", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}], "gentoo": [{"lastseen": "2016-09-06T19:46:20", "references": ["https://bugs.gentoo.org/show_bug.cgi?id=547966", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3294"], "affectedPackage": [{"OS": "Gentoo", "OSVersion": "any", "packageVersion": "2.72-r2", "packageName": "net-dns/dnsmasq", "packageFilename": "UNKNOWN", "arch": "all", "operator": "lt"}], "description": "### Background\n\nDnsmasq is a lightweight, easy to configure DNS forwarder and DHCP server. \n\n### Description\n\nAn out-of-bounds read vulnerability has been found in the tcp_request function in Dnsmasq. \n\n### Impact\n\nA remote attacker could send a specially crafted DNS request, possibly resulting in a Denial of Service condition. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll Dnsmasq users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=net-dns/dnsmasq-2.72-r2\"", "edition": 1, "reporter": "Gentoo Foundation", "published": "2015-12-17T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "gentoo", "title": "Dnsmasq: Denial of Service", "bulletinFamily": "unix", "cvelist": ["CVE-2015-3294"], "modified": "2015-12-17T00:00:00", "id": "GLSA-201512-01", "href": "https://security.gentoo.org/glsa/201512-01", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}], "suse": [{"lastseen": "2017-10-02T23:53:52", "references": ["https://bugzilla.suse.com/1060362", "https://bugzilla.suse.com/1060355", "https://bugzilla.suse.com/1060361", "https://bugzilla.suse.com/1060364", "https://bugzilla.suse.com/1060360", "https://bugzilla.suse.com/1060354"], "affectedPackage": [{"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debuginfo-2.78-0.17.5.1.ppc64.rpm", "packageName": "dnsmasq-debuginfo", "arch": "ppc64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-2.78-0.17.5.1.ppc64.rpm", "packageName": "dnsmasq", "arch": "ppc64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-2.78-0.17.5.1.i586.rpm", "packageName": "dnsmasq", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debuginfo-2.78-0.17.5.1.x86_64.rpm", "packageName": "dnsmasq-debuginfo", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debuginfo-2.78-0.17.5.1.i586.rpm", "packageName": "dnsmasq-debuginfo", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-2.78-0.17.5.1.ia64.rpm", "packageName": "dnsmasq", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debugsource-2.78-0.17.5.1.x86_64.rpm", "packageName": "dnsmasq-debugsource", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-2.78-0.17.5.1.s390x.rpm", "packageName": "dnsmasq", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debugsource-2.78-0.17.5.1.s390x.rpm", "packageName": "dnsmasq-debugsource", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debugsource-2.78-0.17.5.1.ia64.rpm", "packageName": "dnsmasq-debugsource", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debuginfo-2.78-0.17.5.1.ia64.rpm", "packageName": "dnsmasq-debuginfo", "arch": "ia64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-2.78-0.17.5.1.x86_64.rpm", "packageName": "dnsmasq", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debuginfo-2.78-0.17.5.1.s390x.rpm", "packageName": "dnsmasq-debuginfo", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debugsource-2.78-0.17.5.1.ppc64.rpm", "packageName": "dnsmasq-debugsource", "arch": "ppc64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.4", "packageVersion": "2.78-0.17.5.1", "packageFilename": "dnsmasq-debugsource-2.78-0.17.5.1.i586.rpm", "packageName": "dnsmasq-debugsource", "arch": "i586", "operator": "lt"}], "description": "This update for dnsmasq fixes the following security issues:\n\n - CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n - CVE-2017-14492: heap based overflow. [bsc#1060355]\n - CVE-2017-14493: stack based overflow. [bsc#1060360]\n - CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n - CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n\n This update brings a (small) potential incompatibility in the handling of\n &quot;basename&quot; in --pxe-service. Please read the CHANGELOG and the\n documentation if you are using this option.\n\n", "edition": 1, "reporter": "Suse", "published": "2017-10-02T21:11:28", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Security update for dnsmasq (important)", "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2017-14496", "CVE-2017-14494", "CVE-2017-14492", "CVE-2015-8899", "CVE-2017-14491", "CVE-2017-14493", "CVE-2017-14495", "CVE-2015-3294"], "modified": "2017-10-02T21:11:28", "href": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html", "id": "SUSE-SU-2017:2619-1", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2017-10-02T23:53:52", "references": ["https://bugzilla.suse.com/1060362", "https://bugzilla.suse.com/1060355", "https://bugzilla.suse.com/1060361", "https://bugzilla.suse.com/1060364", "https://bugzilla.suse.com/1060360", "https://bugzilla.suse.com/1060354"], "affectedPackage": [{"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-debugsource-2.78-0.16.5.1.s390x.rpm", "packageName": "dnsmasq-debugsource", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-debugsource-2.78-0.16.5.1.x86_64.rpm", "packageName": "dnsmasq-debugsource", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server LTSS", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-2.78-0.16.5.1.x86_64.rpm", "packageName": "dnsmasq", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server LTSS", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-2.78-0.16.5.1.i586.rpm", "packageName": "dnsmasq", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-debuginfo-2.78-0.16.5.1.s390x.rpm", "packageName": "dnsmasq-debuginfo", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-debuginfo-2.78-0.16.5.1.x86_64.rpm", "packageName": "dnsmasq-debuginfo", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-debugsource-2.78-0.16.5.1.i586.rpm", "packageName": "dnsmasq-debugsource", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Debuginfo", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-debuginfo-2.78-0.16.5.1.i586.rpm", "packageName": "dnsmasq-debuginfo", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Point of Sale", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-2.78-0.16.5.1.i586.rpm", "packageName": "dnsmasq", "arch": "i586", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server LTSS", "OSVersion": "11.3", "packageVersion": "2.78-0.16.5.1", "packageFilename": "dnsmasq-2.78-0.16.5.1.s390x.rpm", "packageName": "dnsmasq", "arch": "s390x", "operator": "lt"}], "description": "This update for dnsmasq fixes the following security issues:\n\n - CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n - CVE-2017-14492: heap based overflow. [bsc#1060355]\n - CVE-2017-14493: stack based overflow. [bsc#1060360]\n - CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n - CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n\n This update brings a (small) potential incompatibility in the handling of\n &quot;basename&quot; in --pxe-service. Please read the CHANGELOG and the\n documentation if you are using this option.\n\n", "edition": 1, "reporter": "Suse", "published": "2017-10-02T21:09:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Security update for dnsmasq (important)", "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2017-14496", "CVE-2017-14494", "CVE-2017-14492", "CVE-2015-8899", "CVE-2017-14491", "CVE-2017-14493", "CVE-2017-14495", "CVE-2015-3294"], "modified": "2017-10-02T21:09:17", "href": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html", "id": "SUSE-SU-2017:2617-1", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}, {"lastseen": "2017-10-02T23:53:52", "references": ["https://bugzilla.suse.com/1060362", "https://bugzilla.suse.com/1060355", "https://bugzilla.suse.com/1060361", "https://bugzilla.suse.com/1060364", "https://bugzilla.suse.com/1035227", "https://bugzilla.suse.com/972164", "https://bugzilla.suse.com/902511", "https://bugzilla.suse.com/1060360", "https://bugzilla.suse.com/1060354", "https://bugzilla.suse.com/908137", "https://bugzilla.suse.com/904537"], "affectedPackage": [{"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-debuginfo-2.78-6.6.1.s390x.rpm", "packageName": "dnsmasq-debuginfo", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-debugsource-2.78-6.6.1.x86_64.rpm", "packageName": "dnsmasq-debugsource", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-2.78-6.6.1.ppc64le.rpm", "packageName": "dnsmasq", "arch": "ppc64le", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-debuginfo-2.78-6.6.1.ppc64le.rpm", "packageName": "dnsmasq-debuginfo", "arch": "ppc64le", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-debugsource-2.78-6.6.1.ppc64le.rpm", "packageName": "dnsmasq-debugsource", "arch": "ppc64le", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-2.78-6.6.1.x86_64.rpm", "packageName": "dnsmasq", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-debuginfo-2.78-6.6.1.x86_64.rpm", "packageName": "dnsmasq-debuginfo", "arch": "x86_64", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-debugsource-2.78-6.6.1.s390x.rpm", "packageName": "dnsmasq-debugsource", "arch": "s390x", "operator": "lt"}, {"OS": "SUSE Linux Enterprise Server", "OSVersion": "12", "packageVersion": "2.78-6.6.1", "packageFilename": "dnsmasq-2.78-6.6.1.s390x.rpm", "packageName": "dnsmasq", "arch": "s390x", "operator": "lt"}], "description": "This update for dnsmasq fixes the following issues.\n\n Remedy the following security issues:\n\n - CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n - CVE-2017-14492: heap based overflow. [bsc#1060355]\n - CVE-2017-14493: stack based overflow. [bsc#1060360]\n - CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n - CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n - Prevent a man-in-the-middle attack (bsc#972164, fate#321175).\n\n Furthermore, the following issues have been fixed:\n\n - Fix DHCP relaying, broken in 2.76 and 2.77.\n - Update to version 2.78 (fate#321175, fate#322030, bsc#1035227).\n - Fix PXE booting for UEFI architectures (fate#322030).\n - Drop PrivateDevices=yes which breaks logging (bsc#902511, bsc#904537)\n - Build with support for DNSSEC (fate#318323, bsc#908137).\n\n Please note that this update brings a (small) potential incompatibility in\n the handling of &quot;basename&quot; in --pxe-service. Please read the CHANGELOG and\n the documentation if you are using this option.\n\n", "edition": 1, "reporter": "Suse", "published": "2017-10-02T21:07:18", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Security update for dnsmasq (important)", "type": "suse", "bulletinFamily": "unix", "cvelist": ["CVE-2017-14496", "CVE-2017-14494", "CVE-2017-14492", "CVE-2015-8899", "CVE-2017-14491", "CVE-2017-14493", "CVE-2017-14495", "CVE-2015-3294"], "modified": "2017-10-02T21:07:18", "href": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html", "id": "SUSE-SU-2017:2616-1", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:PARTIAL/"}}]}