Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-3214
HistoryJul 18, 2008 - 12:00 a.m.

CVE-2008-3214

2008-07-1800:00:00
ubuntu.com
ubuntu.com
6

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.048 Low

EPSS

Percentile

92.7%

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon
crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for
an IP address that is not in the same network, related to the DHCP NAK
response from the daemon.

Bugs

Notes

Author Note
jdstrand 6.06 only. PoC exists and trivially exploitable openwall reference has reproducer
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchdnsmasq< 2.25-1ubuntu0.1UNKNOWN

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.048 Low

EPSS

Percentile

92.7%