NetSight
IP …
high7.5Public exploit code

CVE-2017-14496

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.04
DebianDebian Linux
Versions 7.0, 7.1, 9.0
GoogleAndroid
Versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0
NovellLeap
Versions 42.2, 42.3
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
ThekelleysDnsmasq
through 2.77

Weakness classification

CWE-191

References