Out-of-bounds

🗓️ 01 Aug 2019 21:15:00Reported by PRIOn knowledge baseType

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets, resulting in a read operation beyond the buffer allocated for the packet

Reporter	Title	Published	Views	Family All 196
0day.today	Dnsmasq < 2.78 - 2-byte Heap-Based Overflow Exploit	2 Oct 201700:00	–	zdt
ALT Linux	Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1	6 Oct 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Cloud Manager with OpenStack affect IBM Cloud Orchestrator and Cloud Orchestrator Enterprise	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in dnsmasq affect IBM Cloud Manager with OpenStack	8 Aug 201804:13	–	ibm
Tenable Nessus	Amazon Linux 2 : dnsmasq (ALAS-2019-1251)	24 Jul 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : dnsmasq (ALAS-2017-907)	3 Oct 201700:00	–	nessus
Tenable Nessus	Arista Networks EOS DNS 2 byte heap based overflow RCE (SA0030)	19 Feb 202000:00	–	nessus
Tenable Nessus	CentOS 7 : dnsmasq (CESA-2017:2836)	3 Oct 201700:00	–	nessus
Tenable Nessus	CentOS 6 : dnsmasq (CESA-2017:2838)	3 Oct 201700:00	–	nessus
Tenable Nessus	Debian DLA-1124-1 : dnsmasq security update	9 Oct 201700:00	–	nessus