NetSight
IP …
critical9.8Public exploit code

CVE-2017-14491

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS resp…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Affected products

VendorProductAffected versions
ThekelleysDnsmasq
through 2.77
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.04
DebianDebian Linux
Versions 7.0, 7.1, 8.0, 9.0
OpensuseLeap
Versions 42.2, 42.3
SuseLinux Enterprise Debuginfo
Version 11
SuseLinux Enterprise Point Of Sale
Version 11
SuseLinux Enterprise Server
Versions 11, 12
NvidiaLinux For Tegra
before r21.6
before r24.2.2
NvidiaGeforce Experience
from 3.0 before 3.10.0.55

Weakness classification

CWE-787

References