Lucene search
UbuntuUSN-2593-1HistoryMay 04, 2015 - 12:00 a.m.
Dnsmasq vulnerability
2015-05-0400:00:00
ubuntu.com
42
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
9.9 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
88.0%
Releases
- Ubuntu 15.04
- Ubuntu 14.10
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- dnsmasq - Small caching DNS proxy and DHCP/TFTP server
Details
Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed
DNS requests. A remote attacker could use this issue to cause Dnsmasq to
crash, resulting in a denial of service, or possibly obtain sensitive
information.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.04 | noarch | dnsmasq-base | < 2.72-3ubuntu0.1 | UNKNOWN |
| Ubuntu | 15.04 | noarch | dnsmasq | < 2.72-3ubuntu0.1 | UNKNOWN |
| Ubuntu | 15.04 | noarch | dnsmasq-utils | < 2.72-3ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | dnsmasq-base | < 2.71-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | dnsmasq-utils | < 2.71-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | dnsmasq-base | < 2.68-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | dnsmasq-utils | < 2.68-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | dnsmasq | < 2.59-4ubuntu0.2 | UNKNOWN |
| Ubuntu | 12.04 | noarch | dnsmasq-base | < 2.59-4ubuntu0.2 | UNKNOWN |
| Ubuntu | 12.04 | noarch | dnsmasq-utils | < 2.59-4ubuntu0.2 | UNKNOWN |
References
Related
cve
cve
CVE-2015-3294
2015-05-08 14:59:05
nessus
nessus
openSUSE Security Update : dnsmasq (openSUSE-2015-359)
2015-05-13 00:00:00
SUSE SLED11 / SLES11 Security Update : dnsmasq (SUSE-SU-2015:1015-1)
2015-06-10 00:00:00
Ubuntu 14.04 LTS : Dnsmasq vulnerability (USN-2593-1)
2015-05-05 00:00:00
openvas
openvas
Debian Security Advisory DSA 3251-1 (dnsmasq - security update)
2015-05-05 00:00:00
Mageia: Security Advisory (MGASA-2015-0214)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2016-1044)
2020-01-23 00:00:00
ubuntucve
ubuntucve
CVE-2015-3294
2015-04-27 00:00:00
osv
osv
dnsmasq - security update
2015-05-05 00:00:00
dnsmasq - security update
2015-05-20 00:00:00
securityvulns
securityvulns
dnsmasq uninitialized memory dereference
2015-05-05 00:00:00
[USN-2593-1] Dnsmasq vulnerability
2015-05-04 00:00:00
Dnsmasq 2.72 Unchecked returned value
2015-05-05 00:00:00
debian
debian
[SECURITY] [DLA 225-1] dnsmasq security update
2015-05-20 20:43:55
[SECURITY] [DSA 3251-1] dnsmasq security update
2015-05-05 15:39:33
[SECURITY] [DSA 3251-1] dnsmasq security update
2015-05-05 15:39:33
debiancve
debiancve
CVE-2015-3294
2015-05-08 14:59:05
mageia
mageia
Updated dnsmasq packages fix CVE-2015-3294
2015-05-12 22:37:48
nvd
nvd
CVE-2015-3294
2015-05-08 14:59:05
freebsd
freebsd
dnsmasq -- data exposure and denial of service
2015-04-07 00:00:00
gentoo
gentoo
Dnsmasq: Denial of service
2015-12-17 00:00:00
prion
prion
Out-of-bounds
2015-05-08 14:59:00
cvelist
cvelist
CVE-2015-3294
2015-05-08 14:00:00
suse
suse
Security update for dnsmasq (important)
2017-10-02 21:09:17
Security update for dnsmasq (important)
2017-10-02 21:11:28
Security update for dnsmasq (important)
2017-10-02 21:07:18
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
9.9 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
88.0%
Related for USN-2593-1