Show filters
40 Total Results
Displaying 21-30 of 40
Sort by:
Attacker Value
Unknown
CVE-2019-14513
Disclosure Date: August 01, 2019 (last updated November 27, 2024)
Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491.
0
Attacker Value
Unknown
CVE-2017-15107
Disclosure Date: January 23, 2018 (last updated November 26, 2024)
A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
0
Attacker Value
Unknown
CVE-2017-14491
Disclosure Date: October 04, 2017 (last updated January 15, 2025)
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
0
Attacker Value
Unknown
CVE-2017-14496
Disclosure Date: October 03, 2017 (last updated November 08, 2023)
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
0
Attacker Value
Unknown
CVE-2017-14494
Disclosure Date: October 03, 2017 (last updated November 08, 2023)
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
0
Attacker Value
Unknown
CVE-2017-13704
Disclosure Date: October 03, 2017 (last updated November 08, 2023)
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.
0
Attacker Value
Unknown
CVE-2017-14495
Disclosure Date: October 03, 2017 (last updated November 08, 2023)
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
0
Attacker Value
Unknown
CVE-2017-14493
Disclosure Date: October 03, 2017 (last updated November 08, 2023)
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
0
Attacker Value
Unknown
CVE-2017-14492
Disclosure Date: October 03, 2017 (last updated November 08, 2023)
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
0
Attacker Value
Unknown
CVE-2015-8899
Disclosure Date: June 30, 2016 (last updated November 08, 2023)
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
0
