Red Hat Security Advisory

RHSA-2017:2839

dnsmasq security update

Released 2017-10-02 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux HPC Node EUS (v. 6.7) dnsmasq-2.48-16.el6_7.1
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) dnsmasq-utils-2.48-16.el6_7.1
Red Hat Enterprise Linux Server AUS (v. 6.2) dnsmasq-2.48-5.el6_2.2
Red Hat Enterprise Linux Server AUS (v. 6.4) dnsmasq-2.48-13.el6_4.1
Red Hat Enterprise Linux Server AUS (v. 6.5) dnsmasq-2.48-13.el6_5.1
Red Hat Enterprise Linux Server AUS (v. 6.6) dnsmasq-2.48-14.el6_6.1
Red Hat Enterprise Linux Server EUS (v. 6.7) dnsmasq-2.48-16.el6_7.1
Red Hat Enterprise Linux Server Optional AUS (v. 6.4) dnsmasq-2.48-13.el6_4.1, dnsmasq-utils-2.48-13.el6_4.1
Red Hat Enterprise Linux Server Optional AUS (v. 6.5) dnsmasq-2.48-13.el6_5.1, dnsmasq-utils-2.48-13.el6_5.1
Red Hat Enterprise Linux Server Optional AUS (v. 6.6) dnsmasq-utils-2.48-14.el6_6.1
Red Hat Enterprise Linux Server Optional EUS (v. 6.7) dnsmasq-utils-2.48-16.el6_7.1
Red Hat Enterprise Linux Server Optional TUS (v. 6.5) dnsmasq-2.48-13.el6_5.1, dnsmasq-utils-2.48-13.el6_5.1
Red Hat Enterprise Linux Server Optional TUS (v. 6.6) dnsmasq-utils-2.48-14.el6_6.1
Red Hat Enterprise Linux Server TUS (v. 6.5) dnsmasq-2.48-13.el6_5.1
Red Hat Enterprise Linux Server TUS (v. 6.6) dnsmasq-2.48-14.el6_6.1

Fixes 1 record

TI-2017-10594 CVE-2017-14491 · GHSA-m4px-ph3f-7964

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a…

HIGH 84

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.86491 Published 2017-10-02 Fixed CWE-787