{"id":"CVE-2017-15107","aliases":["ALPINE-CVE-2017-15107","BELL-CVE-2017-15107","DEBIAN-CVE-2017-15107","EUVD-2017-6572","GHSA-f999-2m22-345j","SUSE-SU-2019:14190-1","SUSE-SU-2019:1721-1","SUSE-SU-2019:3188-1","SUSE-SU-2019:3189-1","UBUNTU-CVE-2017-15107","USN-4924-1","openSUSE-SU-2019:2669-1","openSUSE-SU-2024:10721-1"],"status":"published","title":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78....","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02646,"percentile":0.85709,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-358"],"published":"2018-01-23T16:00:00Z","modified":"2026-10-24T10:30:27Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"dnsmasq","fixed_in":["2.76-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"dnsmasq","fixed_in":["2.76-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"dnsmasq","fixed_in":["2.78-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"dnsmasq","fixed_in":["2.79-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dnsmasq","fixed_in":["2.79-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dnsmasq","fixed_in":["2.79-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.79-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dnsmasq","fixed_in":["2.78-0.17.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dnsmasq","fixed_in":["2.78-18.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","fixed_in":["2.75-1ubuntu0.16.04.10"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.17.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-7.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.10"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.10"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-lp151.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-1.1"}]}],"bundled":14}],"products":[{"vendor":"dnsmasq","product":"dnsmasq"},{"vendor":"simon kelley","product":"dnsmasq"},{"vendor":"thekelleys","product":"dnsmasq"}],"references":[{"url":"http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2018q1/011896.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://www.securityfocus.com/bid/102812","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15107"},{"url":"https://github.com/advisories/GHSA-f999-2m22-345j"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-15107","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-15107","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-15107","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914190-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1076958","tags":["report"]},{"url":"https://bugzilla.suse.com/1138743","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15107","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191721-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1054429","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193188-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1152539","tags":["report"]},{"url":"https://bugzilla.suse.com/1154849","tags":["report"]},{"url":"https://bugzilla.suse.com/1156543","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14834","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193189-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-15107","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4924-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14513","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q67RZVOGYUXDBDWXHU3XGAS736VQNOM4/#Q67RZVOGYUXDBDWXHU3XGAS736VQNOM4","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3448","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-15107","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","status":"published","published":"2018-01-23T16:00:00Z","modified":"2024-08-05T19:50:16.035Z","cwes":["CWE-358"],"updated_at":"2026-11-02T14:33:14.556599Z"}],"euvd":[{"id":"EUVD-2017-6572","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","status":"published","published":"2018-01-23T16:00:00Z","modified":"2024-08-05T19:50:16Z","updated_at":"2026-11-03T02:23:14.849102Z"}],"ghsa":[{"id":"GHSA-f999-2m22-345j","title":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78....","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","status":"published","published":"2022-05-13T01:37:33Z","modified":"2023-02-01T05:09:08Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:50:55.065879Z"}],"nvd":[{"id":"CVE-2017-15107","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","status":"published","published":"2018-01-23T16:29:00.477Z","modified":"2026-06-17T01:07:15.817Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-358"],"updated_at":"2026-11-02T14:04:13.257031Z"}],"osv":[{"id":"ALPINE-CVE-2017-15107","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","status":"published","published":"2018-01-23T16:29:00.477Z","modified":"2026-06-15T18:18:06.784108318Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-15107","title":"CVE-2017-15107 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:43.142166Z","modified":"2026-01-26T09:47:54.943257Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-15107","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","status":"published","published":"2018-01-23T16:29:00.477Z","modified":"2026-10-24T10:30:27.615743874Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:04.572713Z"},{"id":"DEBIAN-CVE-2017-15107","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","status":"published","published":"2018-01-23T16:29:00.477Z","modified":"2026-09-01T20:03:44.319807496Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"UBUNTU-CVE-2017-15107","description":"A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.","status":"published","published":"2018-01-23T16:29:00Z","modified":"2026-02-04T02:16:51.200868Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"openSUSE-SU-2019:2669-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers \n  to cause denial of service via DHCP response creation (bsc#1154849)\n- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of\n  wildcard synthesized NSEC records may result improper validation for non-existance \n  (bsc#1076958).\n\nOther issues addressed:   \n- Included linux/sockios.h to get SIOCGSTAMP (bsc#1156543).\n- Removed cache size limit (bsc#1138743).\n- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-12-11T09:14:13Z","modified":"2026-02-04T02:40:53.046136Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10721-1","title":"dnsmasq-2.86-1.1 on GA media","description":"These are all security issues fixed in the dnsmasq-2.86-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:12.975434Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2019:14190-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of\n  wildcard synthesized NSEC records may result improper validation for non-existance. (bsc#1076958)\n\nNon-security issue fixed:\n\n- Removed cache size limit. (bsc#1138743)\n","status":"published","published":"2019-10-08T12:40:33Z","modified":"2026-02-04T03:30:30.283982Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1721-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of\n  wildcard synthesized NSEC records may result improper validation for non-existance. (bsc#1076958)\n\nNon-security issue fixed:\n\n- Reload system dbus to pick up policy change on install (bsc#1054429).\n","status":"published","published":"2019-07-02T10:02:18Z","modified":"2026-02-04T03:43:39.84621Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:3188-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers \n  to cause denial of service via DHCP response creation (bsc#1154849)\n- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of\n  wildcard synthesized NSEC records may result improper validation for non-existance \n  (bsc#1076958).\n\nOther issues addressed:   \n- Included linux/sockios.h to get SIOCGSTAMP (bsc#1156543).\n- Removed cache size limit (bsc#1138743).\n- Included config files from /etc/dnsmasq.d/*.conf (bsc#1152539).\n","status":"published","published":"2019-12-05T10:45:00Z","modified":"2026-02-04T04:31:34.936229Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3189-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers \n  to cause denial of service via DHCP response creation (bsc#1154849)\n- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of\n  wildcard synthesized NSEC records may result improper validation for non-existance \n  (bsc#1076958).\n\nOther issues addressed:   \n- Included linux/sockios.h to get SIOCGSTAMP (bsc#1156543).\n- Removed cache size limit (bsc#1138743).\n- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .\n","status":"published","published":"2019-12-05T10:45:17Z","modified":"2026-02-04T04:14:44.872469Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-4924-1","title":"dnsmasq vulnerabilities","description":"It was discovered that Dnsmasq incorrectly handled certain wildcard\nsynthesized NSEC records. A remote attacker could possibly use this issue\nto prove the non-existence of hostnames that actually exist.\n(CVE-2017-15107)\n\nIt was discovered that Dnsmasq incorrectly handled certain large DNS\npackets. A remote attacker could possibly use this issue to cause Dnsmasq\nto crash, resulting in a denial of service. (CVE-2019-14513)\n","status":"published","published":"2021-04-22T16:59:05Z","modified":"2026-02-10T04:42:09Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}