NetSight
IP …
critical9.8Public exploit code

CVE-2017-14493

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.04
DebianDebian Linux
Versions 7.0, 7.1, 9.0
OpensuseLeap
Versions 42.2, 42.3
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
ThekelleysDnsmasq
through 2.77

Weakness classification

CWE-119

References