CVE-2017-14495

Published: 02 October 2017

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.

Priority

Medium

CVSS 3 base score: 7.5

Status

Package Release Status
dnsmasq
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 16.04 ESM (Xenial Xerus)
Released (2.75-1ubuntu0.16.04.3)
Ubuntu 14.04 ESM (Trusty Tahr)
Released (2.68-1ubuntu0.2)