Red Hat Security AdvisoryRHSA-2009:1238
dnsmasq security update
Released 2009-09-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) dnsmasq-2.45-1.1.el5_3, dnsmasq-2.45-1.1.el5_3.i386, dnsmasq-2.45-1.1.el5_3.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) dnsmasq-2.45-1.1.el5_3, dnsmasq-2.45-1.1.el5_3.i386
Fixes 2 records
Priority MEDIUM 46
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demons…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.15252 · Published 2009-09-02 · Fixed CWE-119
Priority LOW 33
The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request w…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.10383 · Published 2009-09-02 · Fixed CWE-399
