CVE-2017-14495

Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.78

Description The issue is related to a memory leak that can be triggered when specific options such as --add-mac, --add-cpe-id, or --add-subnet are used. This allows remote attackers to cause a denial of service by consuming memory through vectors involving DNS response creation.

Recommendations For dnsmasq versions prior to 2.78, update to version 2.78 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the --add-mac, --add-cpe-id, and --add-subnet options until the update is applied.