{"id":"CVE-2019-14834","aliases":["ALPINE-CVE-2019-14834","BELL-CVE-2019-14834","DEBIAN-CVE-2019-14834","EUVD-2019-5960","GHSA-rwmq-3523-q2pg","MGASA-2019-0392","RHSA-2020:1715","RHSA-2020:3878","SUSE-SU-2019:3188-1","SUSE-SU-2019:3189-1","SUSE-SU-2020:0419-1","SUSE-SU-2021:14603-1","UBUNTU-CVE-2019-14834","USN-4698-1","USN-7689-1","openSUSE-SU-2019:2669-1","openSUSE-SU-2024:10721-1"],"status":"published","title":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote...","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","severity":{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.02652,"percentile":0.85746,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2019-12-05T10:45:00Z","modified":"2026-09-21T07:02:41Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"dnsmasq","fixed_in":["2.80-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dnsmasq","fixed_in":["2.80-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"dnsmasq","fixed_in":["2.79-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"dnsmasq","fixed_in":["2.80-r4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dnsmasq","fixed_in":["2.81-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dnsmasq","fixed_in":["2.81-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.81-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"dnsmasq","fixed_in":["2.80-5.2.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq","fixed_in":["0:2.79-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debuginfo","fixed_in":["0:2.79-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debugsource","fixed_in":["0:2.79-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils","fixed_in":["0:2.79-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils-debuginfo","fixed_in":["0:2.79-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq-debuginfo","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq-utils","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq-debuginfo","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq-utils","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq-debuginfo","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq-utils","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq-debuginfo","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq-utils","fixed_in":["0:2.76-16.el7"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dnsmasq","fixed_in":["2.78-18.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","fixed_in":["2.68-1ubuntu0.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","fixed_in":["2.75-1ubuntu0.16.04.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","fixed_in":["2.79-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","fixed_in":["2.80-1.1ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-r4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.81-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.81-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.81-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-5.2.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.76-16.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-7.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.17.15.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-1ubuntu0.2+esm3"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1","2.68-1ubuntu0.2","2.68-1ubuntu0.2+esm1","2.68-1ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.7"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.2"}]}],"versions":["2.78-1","2.78-3","2.79-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-1.1ubuntu1.2"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.7"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.2"}]}],"versions":["2.78-1","2.78-3","2.79-1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-1.1ubuntu1.2"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-1ubuntu0.2+esm3"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1","2.68-1ubuntu0.2","2.68-1ubuntu0.2+esm1","2.68-1ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-lp151.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-1.1"}]}],"bundled":14}],"products":[{"vendor":"dnsmasq","product":"dnsmasq"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"the dnsmasq project","product":"dnsmasq"},{"vendor":"thekelleys","product":"dnsmasq"}],"references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JU474LT66BHNVFG5C4GEV3VTZNAEJ3BS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14834","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=69bc94779c2f035a9fffdb5327a54c3aeca73ed5","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14834","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JU474LT66BHNVFG5C4GEV3VTZNAEJ3BS/"},{"url":"http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=69bc94779c2f035a9fffdb5327a54c3aeca73ed5"},{"url":"https://access.redhat.com/errata/RHSA-2020:1715","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3878","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764425","tags":["report"]},{"url":"https://github.com/advisories/GHSA-rwmq-3523-q2pg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-14834","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-14834","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-14834","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0392.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25854","tags":["report"]},{"url":"http://lists.suse.com/pipermail/sle-security-updates/2019-December/006208.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1779187","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1715.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14834","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1815080","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3878.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193188-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1076958","tags":["report"]},{"url":"https://bugzilla.suse.com/1138743","tags":["report"]},{"url":"https://bugzilla.suse.com/1152539","tags":["report"]},{"url":"https://bugzilla.suse.com/1154849","tags":["report"]},{"url":"https://bugzilla.suse.com/1156543","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14834","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193189-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200419-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114603-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1176076","tags":["report"]},{"url":"https://bugzilla.suse.com/1177077","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25687","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-14834","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4698-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7689-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25686","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25687","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q67RZVOGYUXDBDWXHU3XGAS736VQNOM4/#Q67RZVOGYUXDBDWXHU3XGAS736VQNOM4","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3448","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-14834","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","status":"published","published":"2020-01-07T16:30:04Z","modified":"2024-08-05T00:26:39.119Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:20:17.722148Z"}],"euvd":[{"id":"EUVD-2019-5960","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","status":"published","published":"2020-01-07T16:30:04Z","modified":"2024-08-05T00:26:39Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-03T02:40:38.166988Z"}],"ghsa":[{"id":"GHSA-rwmq-3523-q2pg","title":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote...","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","status":"published","published":"2022-05-24T17:05:42Z","modified":"2023-02-02T21:33:45Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:52:47.451891Z"}],"nvd":[{"id":"CVE-2019-14834","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","status":"published","published":"2020-01-07T17:15:10.893Z","modified":"2026-06-17T02:19:07.7Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:05:42.416368Z"}],"osv":[{"id":"ALPINE-CVE-2019-14834","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","status":"published","published":"2020-01-07T17:15:10.893Z","modified":"2026-09-21T06:17:52.486878092Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-14834","title":"CVE-2019-14834 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:24.474472Z","modified":"2026-01-26T09:48:50.839403Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-14834","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","status":"published","published":"2020-01-07T17:15:10.893Z","modified":"2026-04-16T04:34:45.279634564Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-14834","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","status":"published","published":"2020-01-07T17:15:10.893Z","modified":"2026-09-21T07:02:41.179332906Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"RHSA-2020:1715","title":"Red Hat Security Advisory: dnsmasq security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:24:09Z","modified":"2025-11-22T12:00:16Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3878","title":"Red Hat Security Advisory: dnsmasq security and bug fix update","status":"published","published":"2024-09-16T03:24:16Z","modified":"2026-06-26T10:50:13Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2019-14834","description":"A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.","status":"published","published":"2020-01-07T17:15:00Z","modified":"2026-02-04T02:40:57.433231Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"MGASA-2019-0392","title":"Updated dnsmasq packages fix security vulnerability","description":"A vulnerability was found in dnsmsq through version 2.90, where the\nmemory leak allows remote attackers to cause a denial of service\n(memory consumption) via vectors involving DHCP response creation.\n(CVE-2019-14834)\n","status":"published","published":"2019-12-15T18:03:05Z","modified":"2026-04-16T04:41:15.322224086Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2669-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers \n  to cause denial of service via DHCP response creation (bsc#1154849)\n- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of\n  wildcard synthesized NSEC records may result improper validation for non-existance \n  (bsc#1076958).\n\nOther issues addressed:   \n- Included linux/sockios.h to get SIOCGSTAMP (bsc#1156543).\n- Removed cache size limit (bsc#1138743).\n- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-12-11T09:14:13Z","modified":"2026-02-04T02:40:53.046136Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10721-1","title":"dnsmasq-2.86-1.1 on GA media","description":"These are all security issues fixed in the dnsmasq-2.86-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:12.975434Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2019:3188-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers \n  to cause denial of service via DHCP response creation (bsc#1154849)\n- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of\n  wildcard synthesized NSEC records may result improper validation for non-existance \n  (bsc#1076958).\n\nOther issues addressed:   \n- Included linux/sockios.h to get SIOCGSTAMP (bsc#1156543).\n- Removed cache size limit (bsc#1138743).\n- Included config files from /etc/dnsmasq.d/*.conf (bsc#1152539).\n","status":"published","published":"2019-12-05T10:45:00Z","modified":"2026-02-04T04:31:34.936229Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3189-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers \n  to cause denial of service via DHCP response creation (bsc#1154849)\n- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of\n  wildcard synthesized NSEC records may result improper validation for non-existance \n  (bsc#1076958).\n\nOther issues addressed:   \n- Included linux/sockios.h to get SIOCGSTAMP (bsc#1156543).\n- Removed cache size limit (bsc#1138743).\n- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .\n","status":"published","published":"2019-12-05T10:45:17Z","modified":"2026-02-04T04:14:44.872469Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0419-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers \n  to cause denial of service via DHCP response creation (bsc#1154849)\n\nOther issue addressed:  \n\n- Removed cache size limit (bsc#1138743).\n\n","status":"published","published":"2020-02-19T12:24:14Z","modified":"2026-02-04T02:41:31.716947Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2021:14603-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers \n  to cause denial of service via DHCP response creation (bsc#1154849)\n- bsc#1177077: Fixed DNSpooq vulnerabilities\n- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:\n  Fixed multiple Cache poisoning attacks.\n- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:\n  Fixed multiple potential Heap-based overflows when DNSSEC is\n  enabled.\n- Retry query to other servers on receipt of SERVFAIL rcode\n  (bsc#1176076)\n","status":"published","published":"2021-01-19T11:11:40Z","modified":"2026-02-04T02:44:37.2494Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4698-1","title":"dnsmasq vulnerabilities","description":"Moshe Kol and Shlomi Oberman discovered that Dnsmasq incorrectly handled\nmemory when sorting RRsets. A remote attacker could use this issue to cause\nDnsmasq to hang, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2020-25681, CVE-2020-25687)\n\nMoshe Kol and Shlomi Oberman discovered that Dnsmasq incorrectly handled\nextracting certain names. A remote attacker could use this issue to cause\nDnsmasq to hang, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2020-25682, CVE-2020-25683)\n\nMoshe Kol and Shlomi Oberman discovered that Dnsmasq incorrectly\nimplemented address/port checks. A remote attacker could use this issue to\nperform a cache poisoning attack. (CVE-2020-25684)\n\nMoshe Kol and Shlomi Oberman discovered that Dnsmasq incorrectly\nimplemented query resource name checks. A remote attacker could use this\nissue to perform a cache poisoning attack. (CVE-2020-25685)\n\nMoshe Kol and Shlomi Oberman discovered that Dnsmasq incorrectly handled\nmultiple query requests for the same resource name. A remote attacker could\nuse this issue to perform a cache poisoning attack. (CVE-2020-25686)\n\nIt was discovered that Dnsmasq incorrectly handled memory during DHCP\nresponse creation. A remote attacker could possibly use this issue to\ncause Dnsmasq to consume resources, leading to a denial of service. This\nissue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04\nLTS. (CVE-2019-14834)\n","status":"published","published":"2021-01-19T12:48:33Z","modified":"2026-02-10T04:42:02Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-7689-1","title":"dnsmasq vulnerability","description":"Xu Mingjie discovered that Dnsmasq did not correctly handle certain memory\noperations. A remote attacker could possibly use this issue to cause a\ndenial of service.","status":"published","published":"2025-08-11T07:20:35Z","modified":"2026-02-10T04:49:42Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}