CVE-2017-14496

Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.78

Description The issue is caused by an integer underflow in the add pseudoheader function of the Dnsmasq DNS server when the --add-mac, --add-cpe-id, or --add-subnet option is specified. This allows a remote attacker to cause a denial of service via a specially crafted DNS request.

Recommendations For versions prior to 2.78, update to version 2.78 or later to resolve the issue. As a temporary workaround, consider disabling the add pseudoheader function or avoiding the use of the --add-mac, --add-cpe-id, or --add-subnet options until a patch is available.