CVE-2017-14496 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Denial of service |
| Description | An integer underflow flaw leading to a buffer over-read was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-421 | dnsmasq | 2.77-1 | 2.78-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 02 Oct 2017 | ASA-201710-1 | AVG-421 | dnsmasq | Critical | multiple issues |
| References |
|---|
http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=897c113fda0886a28a986cc6ba17bb93bd6cb1c7 |