Lucene search
Alpine Linux Development TeamALPINE:CVE-2017-14495HistoryOct 03, 2017 - 1:29 a.m.
CVE-2017-14495
2017-10-0301:29:02
Alpine Linux Development Team
security.alpinelinux.org
29
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.5
Confidence
High
EPSS
0.899
Percentile
98.8%
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.10-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.11-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.12-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.13-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.14-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.15-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | dnsmasq | < 2.78-r0 | UNKNOWN |
Related
checkpoint_advisories
checkpoint_advisories
Dnsmasq Lack of Free Denial of Service (CVE-2017-14495)
2017-10-03 00:00:00
nvd
nvd
CVE-2017-14495
2017-10-03 01:29:02
redhatcve
redhatcve
CVE-2017-14495
2019-10-09 22:24:10
CVE-2017-14491
2020-04-09 10:43:20
veracode
veracode
Denial Of Service (DoS)
2019-05-16 01:47:46
debiancve
debiancve
CVE-2017-14495
2017-10-03 01:29:02
cvelist
cvelist
CVE-2017-14495
2017-10-02 21:00:00
osv
osv
CVE-2017-14495
2017-10-03 01:29:02
dnsmasq-2.86-1.1 on GA media
2024-06-15 00:00:00
prion
prion
Memory corruption
2017-10-03 01:29:00
ubuntucve
ubuntucve
CVE-2017-14495
2017-10-02 00:00:00
cve
cve
CVE-2017-14495
2017-10-03 01:29:02
exploitdb
exploitdb
Dnsmasq < 2.78 - Lack of free() Denial of Service
2017-10-02 00:00:00
zdt
zdt
Dnsmasq < 2.78 - Lack of free() Denial of Service Exploit
2017-10-02 00:00:00
packetstorm
packetstorm
Dnsmasq Lack Of Free() Denial Of Service
2017-10-02 00:00:00
seebug
seebug
Dnsmasq DoS Vulnerability(CVE-2017-14495)
2017-10-09 00:00:00
exploitpack
exploitpack
Dnsmasq 2.78 - Lack of free() Denial of Service
2017-10-02 00:00:00
nessus
nessus
EulerOS 2.0 SP2 : dnsmasq (EulerOS-SA-2018-1285)
2018-09-27 00:00:00
Debian DSA-3989-1 : dnsmasq - security update
2017-10-03 00:00:00
EulerOS Virtualization 3.0.1.0 : dnsmasq (EulerOS-SA-2019-1423)
2019-05-14 00:00:00
ics
ics
Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)
2020-10-13 12:00:00
openvas
openvas
CentOS Update for dnsmasq CESA-2017:2836 centos7
2017-10-05 00:00:00
openSUSE: Security Advisory for dnsmasq (openSUSE-SU-2017:2633-1)
2017-10-05 00:00:00
Fedora Update for dnsmasq FEDORA-2017-515264ae24
2017-10-25 00:00:00
suse
suse
Security update for dnsmasq (important)
2017-10-03 03:07:14
Security update for dnsmasq (important)
2017-10-02 21:09:17
Security update for dnsmasq (important)
2017-10-02 21:07:18
centos
centos
dnsmasq security update
2017-10-03 00:04:45
ubuntu
ubuntu
Dnsmasq vulnerabilities
2017-10-03 00:00:00
Dnsmasq regression
2018-01-04 00:00:00
Dnsmasq vulnerabilities
2017-10-02 00:00:00
debian
debian
[SECURITY] [DSA 3989-1] dnsmasq security update
2017-10-02 18:30:02
[SECURITY] [DSA 3989-1] dnsmasq security update
2017-10-02 18:30:02
cert
cert
Dnsmasq contains multiple vulnerabilities
2017-10-02 00:00:00
arista
arista
Security Advisory 0030
2017-10-02 00:00:00
amazon
amazon
Critical: dnsmasq
2017-10-02 17:05:00
Critical: dnsmasq
2019-07-18 18:22:00
gentoo
gentoo
Dnsmasq: Multiple vulnerabilities
2017-10-23 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: dnsmasq-2.76-5.fc26
2017-10-06 15:22:33
[SECURITY] Fedora 27 Update: dnsmasq-2.77-9.fc27
2017-10-24 05:30:01
[SECURITY] Fedora 25 Update: dnsmasq-2.76-4.fc25
2017-10-23 22:52:39
archlinux
archlinux
[ASA-201710-1] dnsmasq: multiple issues
2017-10-02 00:00:00
redhat
redhat
(RHSA-2017:2836) Critical: dnsmasq security update
2017-10-02 13:34:30
mageia
mageia
Updated dnsmasq packages fix security vulnerabilities
2017-10-09 12:51:10
Updated dnsmasq packages fix security vulnerabilities
2017-10-09 12:51:10
threatpost
threatpost
Google Warns of DoS and RCE Bugs in Dnsmasq
2017-10-03 13:16:06
oraclelinux
oraclelinux
dnsmasq security update
2017-10-02 00:00:00
freebsd
freebsd
dnsmasq -- multiple vulnerabilities
2017-10-02 00:00:00
thn
thn
Google Finds 7 Security Flaws in Widely Used Dnsmasq Network Software
2017-10-02 23:44:00
photon
photon
Critical Photon OS Security Update - PHSA-2017-0074
2017-10-04 00:00:00
slackware
slackware
[slackware-security] dnsmasq
2017-10-02 18:43:20
ibm
ibm
f5
f5
K32582354 : Multiple dnsmasq vulnerabilities
2017-10-05 00:00:00
huawei
huawei
Security Advisory - Seven vulnerabilities in Google Dnsmasq
2017-11-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1
2017-10-06 00:00:00
myhack58
myhack58
nvidia
nvidia
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.5
Confidence
High
EPSS
0.899
Percentile
98.8%
Related for ALPINE:CVE-2017-14495