Every CVE Search/ Get API key

CVE-2008-3214

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing...

7.8 HighFix available

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Exploit likelihood

2.53%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Record
CVE-2008-3214
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Record
CVE-2008-3214
Updated
2026-11-02
EUVDEUVD-2008-3204 No score

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Record
EUVD-2008-3204
Updated
2026-11-03
GitHub AdvisoriesGHSA-q354-p7j8-f3fx No score

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing...

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Record
GHSA-q354-p7j8-f3fx
Weakness
CWE-20
Updated
2026-11-02
OSV No score

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Record
CVE-2008-3214
Updated
2026-11-02
OSVDEBIAN-CVE-2008-3214 No score

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Record
DEBIAN-CVE-2008-3214
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dnsmasq
Debian:12
before 2.26-1
2.26-1
dnsmasq
Debian:13
before 2.26-1
2.26-1
dnsmasq
Debian:14
before 2.26-1
2.26-1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-3214 is a high vulnerability (CVSS 7.8) in Thekelleys Dnsmasq, published July 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.53%, the 84th percentile. Fixed in dnsmasq 2.26-1.

References

Show 7 moreShow less
MoveEnter Open