Red Hat Security AdvisoryRHSA-2017:2836
dnsmasq security update
Released 2017-10-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) dnsmasq-2.76-2.el7_4.2
- Red Hat Enterprise Linux Client Optional (v. 7) dnsmasq-utils-2.76-2.el7_4.2
- Red Hat Enterprise Linux ComputeNode (v. 7) dnsmasq-2.76-2.el7_4.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) dnsmasq-utils-2.76-2.el7_4.2
- Red Hat Enterprise Linux Server (v. 7) dnsmasq-2.76-2.el7_4.2
- Red Hat Enterprise Linux Server Optional (v. 7) dnsmasq-utils-2.76-2.el7_4.2
- Red Hat Enterprise Linux Workstation (v. 7) dnsmasq-2.76-2.el7_4.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) dnsmasq-utils-2.76-2.el7_4.2
Fixes 6 records
Priority CRITICAL 86
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.94475 · Published 2017-10-02 · Fixed CWE-119
Priority HIGH 84
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.85243 · Published 2017-10-02 · Fixed CWE-119
Priority HIGH 84
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86491 · Published 2017-10-02 · Fixed CWE-787
Priority HIGH 74
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creat…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.85403 · Published 2017-10-02 · Fixed CWE-772
Priority HIGH 70
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS req…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.68418 · Published 2017-10-02 · Fixed CWE-191
Priority MEDIUM 64
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.70451 · Published 2017-10-02 · Fixed CWE-200
THREATIST.IORead the docs