CVE-2008-3214

Publication date 18 July 2008

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
dnsmasq 8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
7.04 feisty
Not affected
6.06 LTS dapper
Fixed 2.25-1ubuntu0.1

Notes

jdstrand

6.06 only. PoC exists and trivially exploitable openwall reference has reproducer

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
dnsmasq