Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-3294HistoryMay 08, 2015 - 2:59 p.m.
CVE-2015-3294
2015-05-0814:59:05
Debian Security Bug Tracker
security-tracker.debian.org
14
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.017 Low
EPSS
Percentile
88.0%
The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | dnsmasq | < 2.72-3.1 | dnsmasq_2.72-3.1_all.deb |
| Debian | 11 | all | dnsmasq | < 2.72-3.1 | dnsmasq_2.72-3.1_all.deb |
| Debian | 999 | all | dnsmasq | < 2.72-3.1 | dnsmasq_2.72-3.1_all.deb |
| Debian | 13 | all | dnsmasq | < 2.72-3.1 | dnsmasq_2.72-3.1_all.deb |
Related
nessus
nessus
openSUSE Security Update : dnsmasq (openSUSE-2015-359)
2015-05-13 00:00:00
GLSA-201512-01 : Dnsmasq: Denial of Service
2015-12-18 00:00:00
openvas
openvas
Debian Security Advisory DSA 3251-1 (dnsmasq - security update)
2015-05-05 00:00:00
Mageia: Security Advisory (MGASA-2015-0214)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2593-1)
2015-05-05 00:00:00
osv
osv
dnsmasq - security update
2015-05-05 00:00:00
dnsmasq - security update
2015-05-20 00:00:00
ubuntucve
ubuntucve
CVE-2015-3294
2015-04-27 00:00:00
cve
cve
CVE-2015-3294
2015-05-08 14:59:05
debian
debian
[SECURITY] [DSA 3251-1] dnsmasq security update
2015-05-05 15:39:33
[SECURITY] [DLA 225-1] dnsmasq security update
2015-05-20 20:43:55
[SECURITY] [DSA 3251-1] dnsmasq security update
2015-05-05 15:39:33
nvd
nvd
CVE-2015-3294
2015-05-08 14:59:05
mageia
mageia
Updated dnsmasq packages fix CVE-2015-3294
2015-05-12 22:37:48
securityvulns
securityvulns
[USN-2593-1] Dnsmasq vulnerability
2015-05-04 00:00:00
dnsmasq uninitialized memory dereference
2015-05-05 00:00:00
Dnsmasq 2.72 Unchecked returned value
2015-05-05 00:00:00
ubuntu
ubuntu
Dnsmasq vulnerability
2015-05-04 00:00:00
freebsd
freebsd
dnsmasq -- data exposure and denial of service
2015-04-07 00:00:00
gentoo
gentoo
Dnsmasq: Denial of service
2015-12-17 00:00:00
cvelist
cvelist
CVE-2015-3294
2015-05-08 14:00:00
prion
prion
Out-of-bounds
2015-05-08 14:59:00
suse
suse
Security update for dnsmasq (important)
2017-10-02 21:07:18
Security update for dnsmasq (important)
2017-10-02 21:11:28
Security update for dnsmasq (important)
2017-10-02 21:09:17
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.017 Low
EPSS
Percentile
88.0%
Related for DEBIANCVE:CVE-2015-3294