CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2017-14491
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
Severity
- EPSS
- 86% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arista:eos
- arubanetworks:arubaos
- canonical:ubuntu_linux
- debian:debian_linux
- huawei:honor_v9_play_firmware
- nvidia:geforce_experience
- nvidia:linux_for_tegra
- opensuse:leap
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_workstation
- siemens:ruggedcom_rm1224_firmware
- siemens:scalance_m-800_firmware
- siemens:scalance_s615_firmware
- siemens:scalance_w1750d_firmware
- suse:linux_enterprise_debuginfo
- suse:linux_enterprise_point_of_sale
- suse:linux_enterprise_server
- synology:diskstation_manager
- synology:router_manager
- thekelleys:dnsmasq
References
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html
- http://nvidia.custhelp.com/app/answers/detail/a_id/4560