PT-2017-3006

CVE-2017-14493

·

Published

2017-09-25

·

Updated

2026-09-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.78
Description The issue is caused by a stack-based buffer overflow in the DNS server. It can be exploited by a remote attacker using a specially crafted DHCPv6 request, potentially leading to a denial of service or the execution of arbitrary code.
Recommendations For versions prior to 2.78, update to version 2.78 or later to resolve the issue. As a temporary workaround, consider restricting access to the DHCPv6 service to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2017-2387
CESA-2017_2836
CLEANSTART-2026-CB16973
CLEANSTART-2026-KY78316
DSA-3989-1
ELSA-2017-2836
MGASA-2017-0364
MGASA-2017-0367
OPENSUSE-SU-2017_2633-1
OPENSUSE-SU-2024:10721-1
RHSA-2017:2836
RHSA-2017_2836
RHSA-2017:2837
SUSE-SU-2017:2616-1
SUSE-SU-2017:2617-1
SUSE-SU-2017:2618-1
SUSE-SU-2017:2619-1
USN-3430-1
USN-3430-2
Found an issue in the description? Have something to add? Feel free to write us 👾