{"id":"CVE-2008-3214","aliases":["DEBIAN-CVE-2008-3214","EUVD-2008-3204","GHSA-q354-p7j8-f3fx"],"status":"published","title":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing...","description":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02525,"percentile":0.84971,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2008-07-18T16:00:00Z","modified":"2026-10-23T17:47:36Z","fixes":[{"ecosystem":"Debian:12","package":"dnsmasq","fixed_in":["2.26-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dnsmasq","fixed_in":["2.26-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.26-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-1"}]}]}],"products":[{"vendor":"thekelleys","product":"dnsmasq"}],"references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/47438","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","evidence"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43929","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://freshmeat.net/projects/dnsmasq/?branch_id=1991\u0026release_id=217681","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/01/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2008/06/30/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/02/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3214"},{"url":"https://github.com/advisories/GHSA-q354-p7j8-f3fx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-3214","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-3214","description":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.","status":"published","published":"2008-07-18T16:00:00Z","modified":"2024-08-07T09:28:41.592Z","updated_at":"2026-11-02T14:34:45.877751Z"}],"euvd":[{"id":"EUVD-2008-3204","description":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.","status":"published","published":"2008-07-18T16:00:00Z","modified":"2024-08-07T09:28:41Z","updated_at":"2026-11-03T01:38:53.185771Z"}],"ghsa":[{"id":"GHSA-q354-p7j8-f3fx","title":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing...","description":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.","status":"published","published":"2022-05-01T23:57:52Z","modified":"2023-01-31T05:06:02Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:48:57.661503Z"}],"nvd":[{"id":"CVE-2008-3214","description":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.","status":"published","published":"2008-07-18T16:41:00Z","modified":"2026-06-16T22:55:22.447Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:27.025121Z"}],"osv":[{"id":"CVE-2008-3214","description":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.","status":"published","published":"2008-07-18T16:41:00Z","modified":"2026-04-10T03:39:59.267531Z","updated_at":"2026-11-02T15:43:57.178433Z"},{"id":"DEBIAN-CVE-2008-3214","description":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.","status":"published","published":"2008-07-18T16:41:00Z","modified":"2026-10-23T17:47:36.29356922Z","updated_at":"2026-11-02T15:45:23.742363Z"}]}}