Attacker Value
Unknown
CVE-2017-14491
CVE-2017-14491
(Last updated November 08, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
9.8 Critical
Impact Score:
5.9
Exploitability Score:
3.9
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- arista,
- arubanetworks,
- canonical,
- debian,
- huawei,
- nvidia,
- opensuse,
- redhat,
- siemens,
- suse,
- synology,
- thekelleys
Products
- arubaos,
- debian linux 7.0,
- debian linux 7.1,
- debian linux 8.0,
- debian linux 9.0,
- diskstation manager 5.2,
- diskstation manager 6.0,
- diskstation manager 6.1,
- dnsmasq,
- enterprise linux desktop 6.0,
- enterprise linux desktop 7.0,
- enterprise linux server 6.0,
- enterprise linux server 7.0,
- enterprise linux workstation 6.0,
- enterprise linux workstation 7.0,
- eos,
- geforce experience,
- honor v9 play firmware,
- leap 42.2,
- leap 42.3,
- linux enterprise debuginfo 11,
- linux enterprise point of sale 11,
- linux enterprise server 11,
- linux enterprise server 12,
- linux for tegra,
- router manager 1.1,
- ruggedcom rm1224 firmware,
- scalance m-800 firmware,
- scalance s615 firmware,
- scalance w1750d firmware,
- ubuntu linux 12.04,
- ubuntu linux 14.04,
- ubuntu linux 16.04,
- ubuntu linux 17.04
References
Advisory
