ALT-PU-2017-2387-1
Closed vulnerabilities
Published: 2017-09-25
BDU:2017-02357
Уязвимость функции add_pseudoheader DNS-сервера Dnsmasq, позволяющая нарушителю вызвать отказ в обслуживании
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2017-09-25
BDU:2017-02358
Уязвимость DNS-сервера Dnsmasq, вызванная переполнением буфера на стеке, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Severity: CRITICAL (9.8)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2017-09-25
BDU:2017-02359
Уязвимость DNS-сервера Dnsmasq, вызванная переполнением буфера в динамической памяти, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Severity: CRITICAL (9.8)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2017-09-25
BDU:2017-02360
Уязвимость DNS-сервера Dnsmasq, связанная с переполнением буфера, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Severity: HIGH (7.3)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References:
Published: 2017-09-25
BDU:2018-00110
Уязвимость DNS-сервера dnsmasq, связанная с недостатками обработки перенаправленных DHCPv6-запросов, позволяющая нарушителю раскрыть защищаемую информацию
Severity: MEDIUM (5.9)
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
References:
Published: 2017-09-07
BDU:2022-07423
Уязвимость функции memset() DNS-сервера Dnsmasq, позволяющая нарушителю вызвать отказ в обслуживании
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2017-10-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-13704
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=63437ffbb58837b214b4b92cb1c54bc5f3279928
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=63437ffbb58837b214b4b92cb1c54bc5f3279928
- 101085
- 101085
- 101977
- 101977
- 1039474
- 1039474
- https://access.redhat.com/security/vulnerabilities/3199382
- https://access.redhat.com/security/vulnerabilities/3199382
- https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
- FEDORA-2017-274d763ed8
- FEDORA-2017-274d763ed8
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
Published: 2017-10-04
Modified: 2025-01-14
Modified: 2025-01-14
CVE-2017-14491
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- SUSE-SU-2017:2616
- SUSE-SU-2017:2616
- SUSE-SU-2017:2617
- SUSE-SU-2017:2617
- SUSE-SU-2017:2619
- SUSE-SU-2017:2619
- openSUSE-SU-2017:2633
- openSUSE-SU-2017:2633
- http://nvidia.custhelp.com/app/answers/detail/a_id/4560
- http://nvidia.custhelp.com/app/answers/detail/a_id/4560
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html
- http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- DSA-3989
- DSA-3989
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en
- 101085
- 101085
- 101977
- 101977
- 1039474
- 1039474
- USN-3430-1
- USN-3430-1
- USN-3430-2
- USN-3430-2
- USN-3430-3
- USN-3430-3
- RHSA-2017:2836
- RHSA-2017:2836
- RHSA-2017:2837
- RHSA-2017:2837
- RHSA-2017:2838
- RHSA-2017:2838
- RHSA-2017:2839
- RHSA-2017:2839
- RHSA-2017:2840
- RHSA-2017:2840
- RHSA-2017:2841
- RHSA-2017:2841
- https://access.redhat.com/security/vulnerabilities/3199382
- https://access.redhat.com/security/vulnerabilities/3199382
- https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
- FEDORA-2017-7106a157f5
- FEDORA-2017-7106a157f5
- FEDORA-2017-515264ae24
- FEDORA-2017-515264ae24
- FEDORA-2017-24f067299e
- FEDORA-2017-24f067299e
- GLSA-201710-27
- GLSA-201710-27
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30
- https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/
- DSA-3989
- DSA-3989
- 42941
- 42941
- VU#973527
- VU#973527
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
Published: 2017-10-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-14492
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
Severity: CRITICAL (9.8)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- openSUSE-SU-2017:2633
- openSUSE-SU-2017:2633
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=24036ea507862c7b7898b68289c8130f85599c10
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=24036ea507862c7b7898b68289c8130f85599c10
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- DSA-3989
- DSA-3989
- 101085
- 101085
- 1039474
- 1039474
- USN-3430-1
- USN-3430-1
- USN-3430-2
- USN-3430-2
- RHSA-2017:2836
- RHSA-2017:2836
- RHSA-2017:2837
- RHSA-2017:2837
- https://access.redhat.com/security/vulnerabilities/3199382
- https://access.redhat.com/security/vulnerabilities/3199382
- GLSA-201710-27
- GLSA-201710-27
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- 42942
- 42942
- VU#973527
- VU#973527
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
Published: 2017-10-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-14493
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
Severity: CRITICAL (9.8)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- openSUSE-SU-2017:2633
- openSUSE-SU-2017:2633
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=3d4ff1ba8419546490b464418223132529514033
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=3d4ff1ba8419546490b464418223132529514033
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- DSA-3989
- DSA-3989
- 101085
- 101085
- 1039474
- 1039474
- USN-3430-1
- USN-3430-1
- USN-3430-2
- USN-3430-2
- RHSA-2017:2836
- RHSA-2017:2836
- RHSA-2017:2837
- RHSA-2017:2837
- https://access.redhat.com/security/vulnerabilities/3199382
- https://access.redhat.com/security/vulnerabilities/3199382
- GLSA-201710-27
- GLSA-201710-27
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- 42943
- 42943
- VU#973527
- VU#973527
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
Published: 2017-10-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-14494
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
Severity: MEDIUM (5.9)
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
References:
- openSUSE-SU-2017:2633
- openSUSE-SU-2017:2633
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=33e3f1029c9ec6c63e430ff51063a6301d4b2262
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=33e3f1029c9ec6c63e430ff51063a6301d4b2262
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- DSA-3989
- DSA-3989
- 101085
- 101085
- 1039474
- 1039474
- USN-3430-1
- USN-3430-1
- USN-3430-2
- USN-3430-2
- RHSA-2017:2836
- RHSA-2017:2836
- RHSA-2017:2837
- RHSA-2017:2837
- https://access.redhat.com/security/vulnerabilities/3199382
- https://access.redhat.com/security/vulnerabilities/3199382
- GLSA-201710-27
- GLSA-201710-27
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- 42944
- 42944
- VU#973527
- VU#973527
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
Published: 2017-10-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-14495
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- openSUSE-SU-2017:2633
- openSUSE-SU-2017:2633
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=51eadb692a5123b9838e5a68ecace3ac579a3a45
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=51eadb692a5123b9838e5a68ecace3ac579a3a45
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- DSA-3989
- DSA-3989
- 101085
- 101085
- 101977
- 101977
- 1039474
- 1039474
- USN-3430-1
- USN-3430-1
- USN-3430-2
- USN-3430-2
- RHSA-2017:2836
- RHSA-2017:2836
- https://access.redhat.com/security/vulnerabilities/3199382
- https://access.redhat.com/security/vulnerabilities/3199382
- https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
- GLSA-201710-27
- GLSA-201710-27
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- 42945
- 42945
- VU#973527
- VU#973527
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
Published: 2017-10-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-14496
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- openSUSE-SU-2017:2633
- openSUSE-SU-2017:2633
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://nvidia.custhelp.com/app/answers/detail/a_id/4561
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/dnsmasq/CHANGELOG
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=897c113fda0886a28a986cc6ba17bb93bd6cb1c7
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=897c113fda0886a28a986cc6ba17bb93bd6cb1c7
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
- DSA-3989
- DSA-3989
- 101085
- 101085
- 101977
- 101977
- 1039474
- 1039474
- USN-3430-1
- USN-3430-1
- USN-3430-2
- USN-3430-2
- RHSA-2017:2836
- RHSA-2017:2836
- https://access.redhat.com/security/vulnerabilities/3199382
- https://access.redhat.com/security/vulnerabilities/3199382
- https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
- GLSA-201710-27
- GLSA-201710-27
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
- https://source.android.com/security/bulletin/2017-10-01
- https://source.android.com/security/bulletin/2017-10-01
- 42946
- 42946
- VU#973527
- VU#973527
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- [dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
- https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq