CVE-2008-3214

Published: Jul 18, 2008Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Affected (1)

Products: Thekelleys: Dnsmasq

Thekelleys

1 product

Dnsmasq

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Thekelleys Dnsmasq	Version 2.25

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://freshmeat.net/projects/dnsmasq/?branch_id=1991&release_id=217681

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/06/30/7

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/01/8

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/02/4

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/03/4

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/08/8

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/12/3

Source: cve@mitre.org

Exploit

http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

Source: cve@mitre.org

https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/47438

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/43929

Source: cve@mitre.org

http://freshmeat.net/projects/dnsmasq/?branch_id=1991&release_id=217681