CVE-2017-14491

Published: Oct 4, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Affected (46)

Products: Thekelleys: Dnsmasq · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation · Canonical: Ubuntu Linux · +9 more

Show all products

Thekelleys

1 product

Dnsmasq

Redhat

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

1 product

1 product

1 product

3 products

Linux Enterprise Debuginfo

Linux Enterprise Point Of Sale

Linux Enterprise Server

2 products

1 product

Honor V9 Play Firmware

Arista

1 product

Eos

Siemens

4 products

Ruggedcom Rm1224 Firmware

Scalance M 800 Firmware

Scalance S615 Firmware

Scalance W1750d Firmware

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Thekelleys Dnsmasq	Up to 2.77

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 17.04

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 7.1
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.2
Opensuse Leap	Version 42.3

Configuration F

6 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Debuginfo	Version 11 sp3
Suse Linux Enterprise Debuginfo	Version 11 sp4
Suse Linux Enterprise Point Of Sale	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Linux For Tegra	Before r21.6

Running on/with	Platform Versions
Nvidia Jetson Tk1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Linux For Tegra	Before r24.2.2

Running on/with	Platform Versions
Nvidia Jetson Tx1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Geforce Experience	From 3.0 to 3.10.0.55

Running on/with	Platform Versions
Microsoft Windows	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor V9 Play Firmware	Before jimmy-al00ac00b135

Running on/with	Platform Versions
Huawei Honor V9 Play	All versions

Configuration K

4 vulnerable

Vulnerable Software	Affected Versions
Arista Eos	Up to 4.15
Arista Eos	From 4.16 to 4.16.13m
Arista Eos	From 4.17 to 4.17.8m
Arista Eos	From 4.18 to 4.18.4.2f

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Ruggedcom Rm1224 Firmware	Before 5.0

Running on/with	Platform Versions
Siemens Ruggedcom Rm1224	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance M 800 Firmware	Before 5.0

Running on/with	Platform Versions
Siemens Scalance M 800	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance S615 Firmware	Before 5.0

Running on/with	Platform Versions
Siemens Scalance S615	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance W1750d Firmware	Before 6.5.1.5

Running on/with	Platform Versions
Siemens Scalance W1750d	All versions

Configuration P

6 vulnerable

Vulnerable Software	Affected Versions
Arubanetworks Arubaos	From 6.3.1 to 6.3.1.25
Arubanetworks Arubaos	From 6.4.4.0 to 6.4.4.16
Arubanetworks Arubaos	From 6.5.0.0 to 6.5.1.9
Arubanetworks Arubaos	From 6.5.3.0 to 6.5.3.3
Arubanetworks Arubaos	From 6.5.4.0 to 6.5.4.2
Arubanetworks Arubaos	From 8.1.0.0 to 8.1.0.4

Configuration Q

4 vulnerable

Vulnerable Software	Affected Versions
Synology Diskstation Manager	Version 5.2
Synology Diskstation Manager	Version 6.0
Synology Diskstation Manager	Version 6.1
Synology Router Manager	Version 1.1

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (80)

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://nvidia.custhelp.com/app/answers/detail/a_id/4560

Source: cve@mitre.org

Third Party Advisory

http://nvidia.custhelp.com/app/answers/detail/a_id/4561

Source: cve@mitre.org

Third Party Advisory

http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://thekelleys.org.uk/dnsmasq/CHANGELOG

Source: cve@mitre.org

Release NotesVendor Advisory

http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc

Source: cve@mitre.org

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2017/dsa-3989

Source: cve@mitre.org

Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/101085

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/101977

Source: cve@mitre.org

Broken Link

http://www.securitytracker.com/id/1039474

Source: cve@mitre.org

Broken Link

http://www.ubuntu.com/usn/USN-3430-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3430-2

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3430-3

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2836

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2837

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2838

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2839

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2840

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2841

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/security/vulnerabilities/3199382

Source: cve@mitre.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf

Source: cve@mitre.org

PatchThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV/

Source: cve@mitre.org

https://security.gentoo.org/glsa/201710-27

Source: cve@mitre.org

Third Party Advisory

https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html

Source: cve@mitre.org

Third Party Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30

Source: cve@mitre.org

MitigationThird Party Advisory

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449

Source: cve@mitre.org

Third Party Advisory

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2017/dsa-3989

Source: cve@mitre.org

Third Party Advisory

https://www.exploit-db.com/exploits/42941/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.kb.cert.org/vuls/id/973527

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html

Source: cve@mitre.org

https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html

Source: cve@mitre.org

https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html