{"id":"CVE-2015-8899","aliases":["BELL-CVE-2015-8899","DEBIAN-CVE-2015-8899","EUVD-2015-8755","GHSA-f299-rcx3-c9vw","SUSE-SU-2016:3199-1","SUSE-SU-2016:3257-1","SUSE-SU-2016:3269-1","SUSE-SU-2017:2616-1","SUSE-SU-2017:2617-1","SUSE-SU-2017:2619-1","UBUNTU-CVE-2015-8899","USN-3009-1","openSUSE-SU-2024:10195-1"],"status":"published","title":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with...","description":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02503,"percentile":0.84818,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2015-12-31T00:00:00Z","modified":"2026-09-09T07:02:05Z","fixes":[{"ecosystem":"Debian:12","package":"dnsmasq","fixed_in":["2.76-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dnsmasq","fixed_in":["2.76-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.76-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"dnsmasq","fixed_in":["2.71-0.16.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"dnsmasq","fixed_in":["2.71-0.16.3"],"sources":["osv"]},{"ecosystem":"SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5","package":"dnsmasq","fixed_in":["2.71-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 6","package":"dnsmasq","fixed_in":["2.71-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"dnsmasq","fixed_in":["2.71-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"dnsmasq","fixed_in":["2.71-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"dnsmasq","fixed_in":["2.71-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"dnsmasq","fixed_in":["2.71-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dnsmasq","fixed_in":["2.71-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"dnsmasq","fixed_in":["2.71-13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dnsmasq","fixed_in":["2.71-13.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","fixed_in":["2.75-1ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-0.16.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-0.16.3"}]}]},{"source":"osv","ecosystem":"SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71-13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-6.6.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.16.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.16.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.16.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.17.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.17.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.1"}]}],"versions":["2.75-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.1"}]}],"versions":["2.75-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1.3"}]}],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"thekelleys","product":"dnsmasq"}],"references":[{"url":"http://www.securityfocus.com/bid/91031","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010479.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"http://www.ubuntu.com/usn/USN-3009-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010505.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/04/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1036045","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=41a8d9e99be9f2cc8b02051dd322cb45e0faac87","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/03/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8899"},{"url":"http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=41a8d9e99be9f2cc8b02051dd322cb45e0faac87"},{"url":"https://github.com/advisories/GHSA-f299-rcx3-c9vw"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-8899","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8899","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163199-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/983273","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8899","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163257-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163269-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172616-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1035227","tags":["report"]},{"url":"https://bugzilla.suse.com/1060354","tags":["report"]},{"url":"https://bugzilla.suse.com/1060355","tags":["report"]},{"url":"https://bugzilla.suse.com/1060360","tags":["report"]},{"url":"https://bugzilla.suse.com/1060361","tags":["report"]},{"url":"https://bugzilla.suse.com/1060362","tags":["report"]},{"url":"https://bugzilla.suse.com/1060364","tags":["report"]},{"url":"https://bugzilla.suse.com/902511","tags":["report"]},{"url":"https://bugzilla.suse.com/904537","tags":["report"]},{"url":"https://bugzilla.suse.com/908137","tags":["report"]},{"url":"https://bugzilla.suse.com/972164","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14496","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172617-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172619-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-8899","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3009-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8899","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-8899","description":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.","status":"published","published":"2016-06-30T17:00:00Z","modified":"2024-08-06T08:29:22.024Z","updated_at":"2026-11-02T14:35:41.26549Z"}],"euvd":[{"id":"EUVD-2015-8755","description":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.","status":"published","published":"2016-06-30T17:00:00Z","modified":"2024-08-06T08:29:22Z","updated_at":"2026-11-03T01:57:25.869767Z"}],"ghsa":[{"id":"GHSA-f299-rcx3-c9vw","title":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with...","description":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.","status":"published","published":"2022-05-17T03:43:41Z","modified":"2025-04-12T13:02:36Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:28.663035Z"}],"nvd":[{"id":"CVE-2015-8899","description":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.","status":"published","published":"2016-06-30T17:59:00.157Z","modified":"2026-06-17T00:35:27.233Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"BELL-CVE-2015-8899","title":"CVE-2015-8899 does not affect BellSoft software","status":"withdrawn","published":"2016-06-30T17:59:00Z","modified":"2026-01-26T09:45:50.684637Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2015-8899","description":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.","status":"published","published":"2016-06-30T17:59:00Z","modified":"2026-04-10T03:45:36.258011Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-8899","description":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.","status":"published","published":"2016-06-30T17:59:00.157Z","modified":"2026-09-09T07:02:05.161731708Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"UBUNTU-CVE-2015-8899","description":"Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.","status":"published","published":"2015-12-31T00:00:00Z","modified":"2026-02-04T03:39:48.006881Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"openSUSE-SU-2024:10195-1","title":"dnsmasq-2.76-1.3 on GA media","description":"These are all security issues fixed in the dnsmasq-2.76-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:39.884871Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:3199-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2015-8899: Denial of service between local and remote dns entries (bsc#983273)\n","status":"published","published":"2016-12-20T12:18:38Z","modified":"2026-02-04T02:52:26.345861Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2016:3257-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2015-8899: Denial of service between local and remote dns entries (bsc#983273)\n","status":"published","published":"2016-12-23T11:31:23Z","modified":"2026-02-04T02:18:29.866798Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2016:3269-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2015-8899: Denial of service between local and remote dns entries (bsc#983273)\n","status":"published","published":"2016-12-23T17:02:50Z","modified":"2026-02-04T03:54:28.369114Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:2616-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues.\n\nRemedy the following security issues:\n\n- CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n- CVE-2017-14492: heap based overflow. [bsc#1060355]\n- CVE-2017-14493: stack based overflow. [bsc#1060360]\n- CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n- CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n- CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n- Prevent a man-in-the-middle attack (bsc#972164, fate#321175).\n\nFurthermore, the following issues have been fixed:\n\n- Fix DHCP relaying, broken in 2.76 and 2.77.\n- Update to version 2.78 (fate#321175, fate#322030, bsc#1035227).\n- Fix PXE booting for UEFI architectures (fate#322030).\n- Drop PrivateDevices=yes which breaks logging (bsc#902511, bsc#904537)\n- Build with support for DNSSEC (fate#318323, bsc#908137).\n\nPlease note that this update brings a (small) potential incompatibility in the\nhandling of 'basename' in --pxe-service. Please read the CHANGELOG and the\ndocumentation if you are using this option.\n\n","status":"published","published":"2017-10-02T13:53:30Z","modified":"2025-05-02T04:04:33.158915Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2617-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following security issues:\n\n- CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n- CVE-2017-14492: heap based overflow. [bsc#1060355]\n- CVE-2017-14493: stack based overflow. [bsc#1060360]\n- CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n- CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n- CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n\nThis update brings a (small) potential incompatibility in the handling of\n'basename' in --pxe-service. Please read the CHANGELOG and the documentation if\nyou are using this option.\n","status":"published","published":"2017-10-02T13:53:56Z","modified":"2026-02-04T04:29:28.637291Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2619-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following security issues:\n\n- CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n- CVE-2017-14492: heap based overflow. [bsc#1060355]\n- CVE-2017-14493: stack based overflow. [bsc#1060360]\n- CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n- CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n- CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n\nThis update brings a (small) potential incompatibility in the handling of\n'basename' in --pxe-service. Please read the CHANGELOG and the documentation if\nyou are using this option.\n","status":"published","published":"2017-10-02T13:51:46Z","modified":"2026-02-04T03:57:10.138217Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3009-1","title":"dnsmasq vulnerability","description":"Edwin Török discovered that Dnsmasq incorrectly handled certain CNAME\nresponses. A remote attacker could use this issue to cause Dnsmasq to\ncrash, resulting in a denial of service.\n","status":"published","published":"2016-06-20T16:35:09Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}