PT-2017-3006

CVE-2017-14493

·

تاريخ النشر

2017-09-25

·

تاريخ التحديث

2026-09-18

الوصف من

CVSS 3.1
9.8
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.78
Description The issue is caused by a stack-based buffer overflow in the DNS server. It can be exploited by a remote attacker using a specially crafted DHCPv6 request, potentially leading to a denial of service or the execution of arbitrary code.
Recommendations For versions prior to 2.78, update to version 2.78 or later to resolve the issue. As a temporary workaround, consider restricting access to the DHCPv6 service to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2017-2387
CESA-2017_2836
CLEANSTART-2026-CB16973
CLEANSTART-2026-KY78316
DSA-3989-1
ELSA-2017-2836
MGASA-2017-0364
MGASA-2017-0367
OPENSUSE-SU-2017_2633-1
OPENSUSE-SU-2024:10721-1
RHSA-2017:2836
RHSA-2017_2836
RHSA-2017:2837
SUSE-SU-2017:2616-1
SUSE-SU-2017:2617-1
SUSE-SU-2017:2618-1
SUSE-SU-2017:2619-1
USN-3430-1
USN-3430-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾