Veracode Vulnerability DatabaseVERACODE:18767Denial Of Service (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
dnsmasq is vulnerable to denial of service(DoS) attacks. A remote user could send specially crafted DNS packets to trigger an integer underflow and subsequent buffer over-read error in the EDNS0 code and cause the target service to crash. This issue only affects configurations using one of the options: add-mac, add-cpe-id, or add-subnet.
References
lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html
nvidia.custhelp.com/app/answers/detail/a_id/4561
thekelleys.org.uk/dnsmasq/CHANGELOG
thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=897c113fda0886a28a986cc6ba17bb93bd6cb1c7
www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
www.debian.org/security/2017/dsa-3989
www.securityfocus.com/bid/101085
www.securityfocus.com/bid/101977
www.securitytracker.com/id/1039474
www.ubuntu.com/usn/USN-3430-1
www.ubuntu.com/usn/USN-3430-2
access.redhat.com/errata/RHSA-2017:2836
access.redhat.com/security/updates/classification/#critical
access.redhat.com/security/vulnerabilities/3199382
cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
security.gentoo.org/glsa/201710-27
security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
source.android.com/security/bulletin/2017-10-01
www.exploit-db.com/exploits/42946/
www.kb.cert.org/vuls/id/973527
www.mail-archive.com/[email protected]/msg11664.html
www.mail-archive.com/[email protected]/msg11665.html
www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C