NetSight
IP …
critical9.8Public exploit code

CVE-2017-14492

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 rou…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.04
DebianDebian Linux
Versions 7.0, 7.1, 9.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
ThekelleysDnsmasq
through 2.77

Weakness classification

CWE-119

References