CVE-2008-3214
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing...
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
Exploit likelihood
What each source reports
NVD Score used
7.8
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
- Record
CVE-2008-3214- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
- Record
CVE-2008-3214- Updated
- 2026-11-02
EUVDEUVD-2008-3204 No score
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
- Record
EUVD-2008-3204- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q354-p7j8-f3fx No score
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing...
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
- Record
GHSA-q354-p7j8-f3fx- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
- Record
CVE-2008-3214- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-3214 No score
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
- Record
DEBIAN-CVE-2008-3214- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3214 is a high vulnerability (CVSS 7.8) in Thekelleys Dnsmasq, published July 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.53%, the 84th percentile. Fixed in dnsmasq 2.26-1.
References
bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/47438
openwall.com/lists/oss-security/2008/07/12/3
openwall.com/lists/oss-security/2008/07/08/8
exchange.xforce.ibmcloud.com/vulnerabilities/43929
freshmeat.net/projects/dnsmasq?branch_id=1991&release_id=217681
openwall.com/lists/oss-security/2008/07/01/8