Your submission was sent successfully! Close

CVE-2017-14496

Published: 02 October 2017

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.

Priority

Medium

CVSS 3 base score: 7.5

Status

Package Release Status
dnsmasq
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 16.04 ESM (Xenial Xerus)
Released (2.75-1ubuntu0.16.04.3)
Ubuntu 14.04 ESM (Trusty Tahr)
Released (2.68-1ubuntu0.2)