{"id":"CVE-2017-14494","aliases":["ALPINE-CVE-2017-14494","BELL-CVE-2017-14494","DEBIAN-CVE-2017-14494","DLA-1124-1","DSA-3989-1","EUVD-2017-5997","GHSA-p5vm-j7g2-h6cx","MGASA-2017-0364","MGASA-2017-0367","RHSA-2017:2836","RHSA-2017:2837","SUSE-SU-2017:2616-1","SUSE-SU-2017:2617-1","SUSE-SU-2017:2618-1","SUSE-SU-2017:2619-1","UBUNTU-CVE-2017-14494","USN-3430-1","openSUSE-SU-2024:10721-1"],"status":"published","title":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive...","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.70451,"percentile":0.99393,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-200"],"published":"2017-10-02T00:00:00Z","modified":"2026-10-24T10:30:43Z","exploits":[{"source":"exploitdb","id":"EDB-42944","title":"Dnsmasq \u003c 2.78 - Information Leak","type":"dos","platform":"multiple","date":"2017-10-02","verified":true,"url":"https://www.exploit-db.com/exploits/42944"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"dnsmasq","fixed_in":["2.76-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"dnsmasq","fixed_in":["2.76-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"dnsmasq","fixed_in":["2.76-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"dnsmasq","fixed_in":["2.76-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"dnsmasq","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dnsmasq","fixed_in":["2.78-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dnsmasq","fixed_in":["2.78-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.78-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"dnsmasq","fixed_in":["2.68-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","fixed_in":["2.75-1ubuntu0.16.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62-3+deb7u4"}]}],"versions":["2.62-3+deb7u1","2.62-3+deb7u2","2.62-3+deb7u3"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72-3+deb8u2"}]}],"versions":["2.72-3","2.72-3+deb8u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-5+deb9u1"}]}],"versions":["2.76-5"],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.77-1.2.mga6"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.77-1.1.mga5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-2.el7_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-14.el7_2.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-14.el7_2.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-21.el7_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-21.el7_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::computenode","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-14.el7_2.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::computenode","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-21.el7_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-14.el7_2.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-14.el7_2.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-21.el7_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-21.el7_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.2::server","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-14.el7_2.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.3::server","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.66-21.el7_3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-6.6.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.16.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.16.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.16.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.17.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.17.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-1ubuntu0.2"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.3"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-1ubuntu0.2"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.3"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-1.1"}]}],"bundled":14}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"novell","product":"leap"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"thekelleys","product":"dnsmasq"}],"references":[{"url":"http://www.securitytracker.com/id/1039474","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2017/dsa-3989","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/3199382","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report","article"]},{"url":"http://www.securityfocus.com/bid/101085","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3430-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=33e3f1029c9ec6c63e430ff51063a6301d4b2262","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://www.kb.cert.org/vuls/id/973527","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"https://security.gentoo.org/glsa/201710-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3430-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2836","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Third Party Advisory","fix","web","advisory"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4561","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2837","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Third Party Advisory","fix","advisory"]},{"url":"https://www.exploit-db.com/exploits/42944/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://thekelleys.org.uk/dnsmasq/CHANGELOG","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","article","report"]},{"url":"https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14494","tags":["advisory"]},{"url":"https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11664.html"},{"url":"https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11665.html"},{"url":"http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=33e3f1029c9ec6c63e430ff51063a6301d4b2262"},{"url":"https://www.exploit-db.com/exploits/42944"},{"url":"https://github.com/advisories/GHSA-p5vm-j7g2-h6cx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-14494","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-14494","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-14494","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0364.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21793","tags":["report"]},{"url":"http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2017q3/011692.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4TK6DWC53WSU6633EVZL7H4PCWBYHMHK/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0367.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19528","tags":["report"]},{"url":"https://wiki.mozilla.org/images/f/f7/Dnsmasq-report.pdf","tags":["web"]},{"url":"https://docs.google.com/document/d/14y2kiXgB69fLBY0xuMeqc-YiZg4UDCw2xd4-mZspoP8","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495416","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2836.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14492","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14493","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14493","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14493","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14494","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14495","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14495","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14496","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14496","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14496","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2837.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172616-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1035227","tags":["report"]},{"url":"https://bugzilla.suse.com/1060354","tags":["report"]},{"url":"https://bugzilla.suse.com/1060355","tags":["report"]},{"url":"https://bugzilla.suse.com/1060360","tags":["report"]},{"url":"https://bugzilla.suse.com/1060361","tags":["report"]},{"url":"https://bugzilla.suse.com/1060362","tags":["report"]},{"url":"https://bugzilla.suse.com/1060364","tags":["report"]},{"url":"https://bugzilla.suse.com/902511","tags":["report"]},{"url":"https://bugzilla.suse.com/904537","tags":["report"]},{"url":"https://bugzilla.suse.com/908137","tags":["report"]},{"url":"https://bugzilla.suse.com/972164","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14496","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172617-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172618-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172619-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-14494","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3430-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3430-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-14491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14496","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3448","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-14494","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","status":"published","published":"2017-10-02T21:00:00Z","modified":"2024-08-05T19:27:40.722Z","updated_at":"2026-11-02T14:33:12.267141Z"}],"euvd":[{"id":"EUVD-2017-5997","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","status":"published","published":"2017-10-02T21:00:00Z","modified":"2024-08-05T19:27:40Z","updated_at":"2026-11-03T02:23:16.710282Z"}],"ghsa":[{"id":"GHSA-p5vm-j7g2-h6cx","title":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive...","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","status":"published","published":"2022-05-14T03:40:36Z","modified":"2025-04-20T03:47:15Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:53.348802Z"}],"nvd":[{"id":"CVE-2017-14494","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","status":"published","published":"2017-10-03T01:29:02.107Z","modified":"2026-06-17T01:06:15.197Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:01.734197Z"}],"osv":[{"id":"ALPINE-CVE-2017-14494","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","status":"published","published":"2017-10-03T01:29:02.107Z","modified":"2026-06-15T18:18:06.775373089Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-14494","title":"CVE-2017-14494 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:14.864987Z","modified":"2026-01-26T09:47:07.706051Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-14494","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","status":"published","published":"2017-10-03T01:29:02.107Z","modified":"2026-10-24T10:30:43.133393317Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:04.572713Z"},{"id":"DEBIAN-CVE-2017-14494","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","status":"published","published":"2017-10-03T01:29:02.107Z","modified":"2026-09-01T20:03:44.013142499Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"RHSA-2017:2836","title":"Red Hat Security Advisory: dnsmasq security update","status":"published","published":"2024-09-16T00:44:29Z","modified":"2026-06-26T10:35:34Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:2837","title":"Red Hat Security Advisory: dnsmasq security update","status":"published","published":"2024-09-16T00:44:35Z","modified":"2026-06-26T12:22:07.325485847Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-14494","description":"dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.","status":"published","published":"2017-10-02T00:00:00Z","modified":"2026-02-04T02:32:19.069009Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"DLA-1124-1","title":"dnsmasq - security update","status":"published","published":"2017-10-06T00:00:00Z","modified":"2026-03-09T01:01:50.933481Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3989-1","title":"dnsmasq - security update","status":"published","published":"2017-10-02T00:00:00Z","modified":"2026-03-09T01:22:12.478034Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0364","title":"Updated dnsmasq packages fix security vulnerabilities","description":"CVE-2017-13704: Dnsmasq could be made to crash on a large DNS query. A\nDNS query received by UDP which exceeds 512 bytes (or the EDNS0 packet\nsize, if different.) is enough to cause SIGSEGV.\n\nCVE-2017-14491: A heap buffer overflow was found in dnsmasq in the code\nresponsible for building DNS replies. An attacker could send crafted DNS\npackets to dnsmasq which would cause it to crash or, potentially,\nexecute arbitrary code.\n\nCVE-2017-14492: A heap buffer overflow was discovered in dnsmasq in the\nIPv6 router advertisement (RA) handling code. An attacker on the local\nnetwork segment could send crafted RAs to dnsmasq which would cause it\nto crash or, potentially, execute arbitrary code. This issue only\naffected configurations using one of these options: enable-ra, ra-only,\nslaac, ra-names, ra-advrouter, or ra-stateless.\n\nCVE-2017-14493: A stack buffer overflow was found in dnsmasq in the\nDHCPv6 code. An attacker on the local network could send a crafted\nDHCPv6 request to dnsmasq which would cause it to a crash or,\npotentially, execute arbitrary code.\n\nCVE-2017-14494: An information leak was found in dnsmasq in the DHCPv6\nrelay code. An attacker on the local network could send crafted DHCPv6\npackets to dnsmasq causing it to forward the contents of process memory,\npotentially leaking sensitive data.\n\nCVE-2017-14495: A memory exhaustion flaw was found in dnsmasq in the\nEDNS0 code. An attacker could send crafted DNS packets which would\ntrigger memory allocations which would never be freed, leading to\nunbounded memory consumption and eventually a crash. This issue only\naffected configurations using one of the options: add-mac, add-cpe-id,\nor add-subnet.\n\nCVE-2017-14496: An integer underflow flaw leading to a buffer over-read\nwas found in dnsmasq in the EDNS0 code. An attacker could send crafted\nDNS packets to dnsmasq which would cause it to crash. This issue only\naffected configurations using one of the options: add-mac, add-cpe-id,\nor add-subnet.\n","status":"published","published":"2017-10-09T09:51:10Z","modified":"2026-04-16T04:42:43.600632838Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2017-0367","title":"Updated dnsmasq packages fix security vulnerabilities","description":"An audit by mozilla security found several vulnerability and potential\nvulnerability in dnsmasq:\n- Uninitialized buffer leads to memory leakage\n- Allocated memory is not cleared\n- Unchecked return value can lead to NULL pointer dereference\n- Hardcoded values in fscanf() format strings with aliased buffers \n\nCVE-2017-13704: Dnsmasq could be made to crash on a large DNS query: A\nDNS query received by UDP which exceeds 512 bytes (or the EDNS0 packet\nsize, if different.) is enough to cause SIGSEGV. (bug 21793)\n\nCVE-2017-14491: A heap buffer overflow was found in dnsmasq in the code\nresponsible for building DNS replies. An attacker could send crafted DNS\npackets to dnsmasq which would cause it to crash or, potentially,\nexecute arbitrary code.\n\nCVE-2017-14492: A heap buffer overflow was discovered in dnsmasq in the\nIPv6 router advertisement (RA) handling code. An attacker on the local\nnetwork segment could send crafted RAs to dnsmasq which would cause it\nto crash or, potentially, execute arbitrary code. This issue only\naffected configurations using one of these options: enable-ra, ra-only,\nslaac, ra-names, ra-advrouter, or ra-stateless.\n\nCVE-2017-14493: A stack buffer overflow was found in dnsmasq in the\nDHCPv6 code. An attacker on the local network could send a crafted\nDHCPv6 request to dnsmasq which would cause it to a crash or,\npotentially, execute arbitrary code.\n\nCVE-2017-14494: An information leak was found in dnsmasq in the\nDHCPv6 relay code. An attacker on the local network could send crafted\nDHCPv6 packets to dnsmasq causing it to forward the contents of process\nmemory, potentially leaking sensitive data.\n\nCVE-2017-14495: A memory exhaustion flaw was found in dnsmasq in the\nEDNS0 code. An attacker could send crafted DNS packets which would\ntrigger memory allocations which would never be freed, leading to\nunbounded memory consumption and eventually a crash. This issue only\naffected configurations using one of the options: add-mac, add-cpe-id,\nor add-subnet.\n\nCVE-2017-14496: An integer underflow flaw leading to a buffer\nover-read was found in dnsmasq in the EDNS0 code. An attacker could\nsend crafted DNS packets to dnsmasq which would cause it to crash.\nThis issue only affected configurations using one of the options:\nadd-mac, add-cpe-id, or add-subnet.\n","status":"published","published":"2017-10-09T09:51:10Z","modified":"2026-04-16T06:26:24.876060983Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10721-1","title":"dnsmasq-2.86-1.1 on GA media","description":"These are all security issues fixed in the dnsmasq-2.86-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:12.975434Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2017:2616-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues.\n\nRemedy the following security issues:\n\n- CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n- CVE-2017-14492: heap based overflow. [bsc#1060355]\n- CVE-2017-14493: stack based overflow. [bsc#1060360]\n- CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n- CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n- CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n- Prevent a man-in-the-middle attack (bsc#972164, fate#321175).\n\nFurthermore, the following issues have been fixed:\n\n- Fix DHCP relaying, broken in 2.76 and 2.77.\n- Update to version 2.78 (fate#321175, fate#322030, bsc#1035227).\n- Fix PXE booting for UEFI architectures (fate#322030).\n- Drop PrivateDevices=yes which breaks logging (bsc#902511, bsc#904537)\n- Build with support for DNSSEC (fate#318323, bsc#908137).\n\nPlease note that this update brings a (small) potential incompatibility in the\nhandling of 'basename' in --pxe-service. Please read the CHANGELOG and the\ndocumentation if you are using this option.\n\n","status":"published","published":"2017-10-02T13:53:30Z","modified":"2025-05-02T04:04:33.158915Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2617-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following security issues:\n\n- CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n- CVE-2017-14492: heap based overflow. [bsc#1060355]\n- CVE-2017-14493: stack based overflow. [bsc#1060360]\n- CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n- CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n- CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n\nThis update brings a (small) potential incompatibility in the handling of\n'basename' in --pxe-service. Please read the CHANGELOG and the documentation if\nyou are using this option.\n","status":"published","published":"2017-10-02T13:53:56Z","modified":"2026-02-04T04:29:28.637291Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2618-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following security issues:\n\n- CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n- CVE-2017-14492: heap based overflow. [bsc#1060355]\n- CVE-2017-14493: stack based overflow. [bsc#1060360]\n- CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n- CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n- CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n","status":"published","published":"2017-10-02T13:53:24Z","modified":"2026-02-04T03:58:32.237988Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2619-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following security issues:\n\n- CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354]\n- CVE-2017-14492: heap based overflow. [bsc#1060355]\n- CVE-2017-14493: stack based overflow. [bsc#1060360]\n- CVE-2017-14494: DHCP - info leak. [bsc#1060361]\n- CVE-2017-14495: DNS - OOM DoS. [bsc#1060362]\n- CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364]\n\nThis update brings a (small) potential incompatibility in the handling of\n'basename' in --pxe-service. Please read the CHANGELOG and the documentation if\nyou are using this option.\n","status":"published","published":"2017-10-02T13:51:46Z","modified":"2026-02-04T03:57:10.138217Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3430-1","title":"dnsmasq vulnerabilities","description":"Felix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DNS requests. A remote attacker\ncould use this issue to cause Dnsmasq to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. (CVE-2017-14491)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled IPv6 router advertisements. A\nremote attacker could use this issue to cause Dnsmasq to crash, resulting\nin a denial of service, or possibly execute arbitrary code.\n(CVE-2017-14492)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DHCPv6 requests. A remote\nattacker could use this issue to cause Dnsmasq to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2017-14493)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DHCPv6 packets. A remote\nattacker could use this issue to possibly obtain sensitive memory contents.\n(CVE-2017-14494)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DNS requests. A remote attacker\ncould use this issue to cause Dnsmasq to consume memory, resulting in a\ndenial of service. (CVE-2017-14495)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DNS requests. A remote attacker\ncould use this issue to cause Dnsmasq to crash, resulting in a denial of\nservice. (CVE-2017-14496)\n","status":"published","published":"2017-10-02T14:09:38Z","modified":"2026-02-10T04:41:12Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}