Red Hat Security AdvisoryRHSA-2017:2837
dnsmasq security update
Released 2017-10-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) dnsmasq-2.66-14.el7_2.2
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) dnsmasq-2.66-21.el7_3.2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) dnsmasq-utils-2.66-14.el7_2.2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) dnsmasq-utils-2.66-21.el7_3.2
- Red Hat Enterprise Linux Server EUS (v. 7.2) dnsmasq-2.66-14.el7_2.2
- Red Hat Enterprise Linux Server EUS (v. 7.3) dnsmasq-2.66-21.el7_3.2
- Red Hat Enterprise Linux Server Optional EUS (v. 7.2) dnsmasq-utils-2.66-14.el7_2.2
- Red Hat Enterprise Linux Server Optional EUS (v. 7.3) dnsmasq-utils-2.66-21.el7_3.2
Fixes 4 records
Priority CRITICAL 86
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.94475 · Published 2017-10-02 · Fixed CWE-119
Priority HIGH 84
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.85243 · Published 2017-10-02 · Fixed CWE-119
Priority HIGH 84
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86491 · Published 2017-10-02 · Fixed CWE-787
Priority MEDIUM 64
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.70451 · Published 2017-10-02 · Fixed CWE-200
THREATIST.IORead the docs