CVE-2017-14491
Critical
Description
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
SeverityCritical
CVSS9.8
Exploit probability100. percentile86.5%
Product
Thekelleys Dnsmasq
PublishedOct 4, 2017
First seenOct 4, 2017
How to fix
Update
- nvidia linux_for_tegrar21.6, r24.2.2 or later
- nvidia geforce_experience3.10.0.55 or later
- huawei honor_v9_play_firmwarejimmy-al00ac00b135 or later
- arista eos4.16.13m, 4.17.8m or later
- siemens ruggedcom_rm1224_firmware5.0 or later
- siemens scalance_m-800_firmware5.0 or later
- siemens scalance_s615_firmware5.0 or later
- siemens scalance_w1750d_firmware6.5.1.5 or later
- arubanetworks arubaos6.3.1.25, 6.4.4.16, 6.5.1.9, 6.5.3.3, 6.5.4.2, 8.1.0.4 or later
Vendor advisories
- access.redhat.com/errata/RHSA-2017:2838
- security.gentoo.org/glsa/201710-27
- access.redhat.com/errata/RHSA-2017:2840
- access.redhat.com/errata/RHSA-2017:2839
- access.redhat.com/errata/RHSA-2017:2836
- access.redhat.com/errata/RHSA-2017:2837
- access.redhat.com/errata/RHSA-2017:2841
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB/
- debian.org/security/2017/dsa-3989
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| thekelleys dnsmasq | v ≤ 2.77 | — |
| redhat enterprise_linux_desktop | 6.0, 7.0 | — |
| redhat enterprise_linux_server | 6.0, 7.0 | — |
| redhat enterprise_linux_workstation | 6.0, 7.0 | — |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 17.04 | — |
| debian debian_linux | 7.0, 7.1, 8.0, 9.0 | — |
| opensuse leap | 42.2, 42.3 | — |
| suse linux_enterprise_debuginfo | 11 | — |
| suse linux_enterprise_point_of_sale | 11 | — |
| suse linux_enterprise_server | 11, 12 | — |
| nvidia linux_for_tegra | v < r21.6, v < r24.2.2 | r21.6, r24.2.2 |
| nvidia geforce_experience | 3.0 ≤ v < 3.10.0.55 | 3.10.0.55 |
| huawei honor_v9_play_firmware | v < jimmy-al00ac00b135 | jimmy-al00ac00b135 |
| arista eos | v ≤ 4.15, 4.16 ≤ v < 4.16.13m, 4.17 ≤ v < 4.17.8m, 4.18 ≤ v ≤ 4.18.4.2f | 4.16.13m, 4.17.8m |
| siemens ruggedcom_rm1224_firmware | v < 5.0 | 5.0 |
| siemens scalance_m-800_firmware | v < 5.0 | 5.0 |
| siemens scalance_s615_firmware | v < 5.0 | 5.0 |
| siemens scalance_w1750d_firmware | v < 6.5.1.5 | 6.5.1.5 |
| arubanetworks arubaos | 6.3.1 ≤ v < 6.3.1.25, 6.4.4.0 ≤ v < 6.4.4.16, 6.5.0.0 ≤ v < 6.5.1.9, 6.5.3.0 ≤ v < 6.5.3.3, 6.5.4.0 ≤ v < 6.5.4.2, 8.1.0.0 ≤ v < 8.1.0.4 | 6.3.1.25, 6.4.4.16, 6.5.1.9, 6.5.3.3, 6.5.4.2, 8.1.0.4 |
| synology router_manager | 1.1 | — |
| synology diskstation_manager | 5.2, 6.0, 6.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.