PT-2017-3007

CVE-2017-14492

·

تاريخ النشر

2017-09-25

·

تاريخ التحديث

2026-09-18

الوصف من

CVSS 3.1
9.8
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dnsmasq versions prior to 2.78
Description The issue is caused by a heap-based buffer overflow in the dynamic memory of the DNS server. This can be exploited by a remote attacker using a specially crafted IPv6 request, potentially allowing them to cause a denial of service or execute arbitrary code.
Recommendations For versions prior to 2.78, update to version 2.78 or later to resolve the issue. As a temporary workaround, consider restricting access to the DNS server to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2017-2387
CESA-2017_2836
CLEANSTART-2026-KY78316
CLEANSTART-2026-NM88117
DLA-1124-1
DSA-3989-1
ELSA-2017-2836
MGASA-2017-0364
MGASA-2017-0367
OPENSUSE-SU-2017_2633-1
OPENSUSE-SU-2024:10721-1
RHSA-2017:2836
RHSA-2017_2836
RHSA-2017:2837
SUSE-SU-2017:2616-1
SUSE-SU-2017:2617-1
SUSE-SU-2017:2618-1
SUSE-SU-2017:2619-1
USN-3430-1
USN-3430-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾