NetSight
IP …
medium5.9Public exploit code

CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.04
DebianDebian Linux
Versions 7.0, 7.1, 9.0
NovellLeap
Versions 42.2, 42.3
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
ThekelleysDnsmasq
through 2.77

Weakness classification

CWE-200

References