CVE-2017-14494

dnsmasq: information leak in the DHCPv6 relay code

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.

CVSS 3.0 · 5.9 Medium EPSS 70.5% KEV · Not listed

Vendors

Canonical Debian Novell and 2 more

Products

Ubuntu Linux Debian Linux Leap and 6 more

CVE-2017-14495

dnsmasq: memory exhaustion vulnerability in the EDNS0 code

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.

CVSS 3.0 · 7.5 High EPSS 85.4% KEV · Not listed

Vendors

Canonical Debian Novell and 2 more

Products

Ubuntu Linux Debian Linux Leap and 5 more

CVE-2017-14496

dnsmasq: integer underflow leading to buffer over-read in the EDNS0 code

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.

CVSS 3.0 · 7.5 High EPSS 68.4% KEV · Not listed

Vendors

Canonical Debian Google and 3 more

Products

Ubuntu Linux Debian Linux Android and 6 more

CVE-2017-14491

dnsmasq: heap overflow in the code responsible for building DNS replies

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

CVSS 3.1 · 9.8 Critical EPSS 86.5% KEV · Not listed

Vendors

Arista Arubanetworks Canonical and 10 more

Products

Eos Arubaos Ubuntu Linux and 32 more

CVE-2015-3294

dnsmasq: unchecked return value of the setup_reply() function

The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.

CVSS 2.0 · 6.4 Medium EPSS 5.0% KEV · Not listed

Vendors

Oracle Thekelleys

Products

Solaris Dnsmasq

CVE-2015-8899

dnsmasq: Denial-of-service when empty address from DNS overlays A record from hosts

Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed

Vendors

Canonical Thekelleys

Products

Ubuntu Linux Dnsmasq

CVE-2012-3411

libvirt+dnsmasq: DNS configured to answer DNS queries from non-virtual networks

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

CVSS 2.0 · 5.0 Medium EPSS 5.1% KEV · Not listed

Vendors

Redhat Thekelleys

Products

Enterprise Linux Enterprise Linux Desktop Enterprise Linux Server and 3 more

CVE-2013-0198

dnsmasq: Incomplete fix for the CVE-2012-3411 issue

Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3411.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2023-49441

dnsmasq: vulnerable to Integer Overflow via forward_query

dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2021-45957

dnsmasq: a heap-based buffer overflow in answer_request

Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2021-45956

dnsmasq: a heap-based buffer overflow in print_mac

Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2021-45955

dnsmasq: heap-based buffer overflow in resize_packet

Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge." However, a contributor states that a security patch (mentioned in 016162.html) is needed

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2021-45954

dnsmasq: a heap-based buffer overflow in extract_name

Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2021-45953

dnsmasq: a heap-based buffer overflow in extract_name

Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2021-45952

dnsmasq: a heap-based buffer overflow in dhcp_reply

Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2021-45951

dnsmasq: a heap-based buffer overflow in check_bad_address

Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq

CVE-2019-14834

dnsmasq: memory leak in the create_helper() function in /src/helper.c

A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.

CVSS 3.1 · 3.7 Low EPSS 2.7% KEV · Not listed

Vendors

Fedoraproject Redhat Thekelleys

Products

Fedora Enterprise Linux Dnsmasq

CVE-2019-14513

dnsmasq: Improper bounds checking leads to a buffer overread

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Debian Redhat Thekelleys

Products

Debian Linux Enterprise Linux Dnsmasq

CVE-2017-15107

dnsmasq: Improper validation of wildcard synthesized NSEC records

A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed

Vendors

Thekelleys

Products

Dnsmasq