CVE-2017-16564

Affected : Vonage (Grandstream) HT802 home gateway devices. Vulnerability : Stored Cross-Site Scripting (XSS) in /cgi-bin/config2, exploitable via the DHCP vendor class ID field (P148). Impact : remote authenticated users can inject arbitrary web script/HTML (per CVE-2017-16564). Root cause : XSS...

The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE allows a attacker to execute arbitrary code with administrator privileges, or to cause a service failure and system reboot.

The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE systems is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a Denial-of-Service attack DoS, along with a system reboot, using a specially crafted DHCPv...

openSUSE Security Update : freeradius-server (openSUSE-2017-1192)

This update for freeradius-server fixes the following issues : Fix a number of security issues found via fuzzing by Guido Vranken See http://freeradius.org/security/fuzzer-2017.html for details. boo1049086 - CVE-2017-10987 / FR-GV-304: DHCP - Buffer over-read in frdhcpdecodesuboptions -...

[SECURITY] Fedora 27 Update: dnsmasq-2.77-9.fc27

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

[SECURITY] Fedora 25 Update: dnsmasq-2.76-4.fc25

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

Dnsmasq: Multiple vulnerabilities

Background Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP server. Description Multiple vulnerabilities have been discovered in Dnsmasq. Please review the references below for details. Impact A remote attacker could execute arbitrary code or cause a Denial of Service...

NXP Semiconductors MQX RTOS contains multiple vulnerabilities

Overview The NXP Semiconductors MQX RTOS prior to version 5.1 contains a buffer overflow in the DHCP client, which may lead to memory corruption allowing an attacker to execute arbitrary code, as well as an out of bounds read in the DNS client which may lead to a denial of service. Description Th...

SUSE SLES12 Security Update : dracut (SUSE-SU-2017:2696-1)

This update for dracut fixes the following issues: Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc100834...

The vulnerability of the DHCP service provided by the D-Link DIR-850L router’s microprogramming software allows a attacker to execute arbitrary code with root privileges.

The vulnerability of the DHCP service provided by the D-Link DIR-850L router’s microprogramming software is related to the lack of measures for cleaning incoming data /etc/services/INET/inetipv4.php. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...

September 12, 2017—KB4038793 (Security-only update)

None None...

DNSmasq Arbitrary Code Execution Vulnerability (CNVD-2017-29276)

DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. An arbitrary code execution vulnerability in DNSmasq 2.77 and earlier versions allows remote attackers to trigger a stack overflow and execute arbitra...

DNSmasq Information Disclosure Vulnerability

DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. An information disclosure vulnerability in DNSmasq 2.77 and prior versions allows remote attackers to trigger a flaw in the DHCPv6 relay code by sendi...

[SECURITY] Fedora 26 Update: dnsmasq-2.76-5.fc26

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

RedHat Update for dnsmasq RHSA-2017:2836-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for dnsmasq RHSA-2017:2838-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for dnsmasq CESA-2017:2838 centos6

Check the version of dnsmasq SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882781";...

habu - Network Hacking Toolkit

Habu is to teach and learn some concepts about Python and Network Hacking. These are basic functions that help with some tasks for Ethical Hacking and Penetration Testing. Most of them are related with networking, and the implementations are intended to be understandable for who wants to read the...

Google Warns of DoS and RCE Bugs in Dnsmasq

Seven flaws in what is known as Dnsmasq can be exploited by attackers who can use the bugs to carry out remote code execution, information exposure or a denial of service attacks against affected devices. Google researchers identified the flaws in a research paper published Monday, the same day a...

Security update for dnsmasq (important)

This update for dnsmasq fixes the following security issues: - CVE-2017-14491: 2 byte heap based overflow. bsc1060354 - CVE-2017-14492: heap based overflow. bsc1060355 - CVE-2017-14493: stack based overflow. bsc1060360 - CVE-2017-14494: DHCP - info leak. bsc1060361 - CVE-2017-14495: DNS - OOM DoS...

ALPINE-CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...