Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2019-14513HistoryAug 01, 2019 - 9:15 p.m.
CVE-2019-14513
2019-08-0121:15:12
Debian Security Bug Tracker
security-tracker.debian.org
12
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.303 Low
EPSS
Percentile
97.0%
Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | dnsmasq | < 2.76-1 | dnsmasq_2.76-1_all.deb |
| Debian | 11 | all | dnsmasq | < 2.76-1 | dnsmasq_2.76-1_all.deb |
| Debian | 999 | all | dnsmasq | < 2.76-1 | dnsmasq_2.76-1_all.deb |
| Debian | 13 | all | dnsmasq | < 2.76-1 | dnsmasq_2.76-1_all.deb |
Related
redhatcve
redhatcve
CVE-2019-14513
2019-08-09 10:22:08
CVE-2017-14491
2020-04-09 10:43:20
ubuntucve
ubuntucve
CVE-2019-14513
2019-08-01 00:00:00
CVE-2017-14491
2017-10-02 00:00:00
veracode
veracode
Information Disclosure
2020-03-28 02:00:26
Remote Code Execution (RCE)
2017-10-11 22:25:25
Remote Code Execution (RCE)
2019-01-15 09:19:03
prion
prion
Out-of-bounds
2019-08-01 21:15:00
Heap overflow
2017-10-04 01:29:00
cvelist
cvelist
CVE-2019-14513
2019-08-01 20:47:48
CVE-2017-14491
2017-10-02 21:00:00
nvd
nvd
CVE-2019-14513
2019-08-01 21:15:12
CVE-2017-14491
2017-10-04 01:29:02
osv
osv
CVE-2019-14513
2019-08-01 21:15:12
dnsmasq - security update
2019-09-13 00:00:00
AOSP dnsmasq 2.5.1 heap overflow
2021-03-01 00:00:00
cve
cve
CVE-2019-14513
2019-08-01 21:15:12
CVE-2017-14491
2017-10-04 01:29:02
nessus
nessus
Ubuntu 16.04 LTS : Dnsmasq vulnerabilities (USN-4924-1)
2021-04-22 00:00:00
Debian DLA-1921-1 : dnsmasq security update
2019-09-16 00:00:00
Oracle Linux 5 : dnsmasq (ELSA-2017-2840)
2023-09-07 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1921-1)
2019-09-14 00:00:00
Dnsmasq < 2.76 DoS Vulnerability
2019-08-06 00:00:00
RedHat Update for dnsmasq RHSA-2017:2838-01
2017-10-05 00:00:00
debian
debian
[SECURITY] [DLA 1921-1] dnsmasq security update
2019-09-13 12:40:28
[SECURITY] [DLA 1124-1] dnsmasq security update
2017-10-06 14:42:23
[SECURITY] [DSA 3989-1] dnsmasq security update
2017-10-02 18:30:02
oraclelinux
oraclelinux
dnsmasq security update
2017-10-03 00:00:00
dnsmasq security update
2017-10-02 00:00:00
dnsmasq security update
2017-10-02 00:00:00
centos
centos
dnsmasq security update
2017-10-02 23:34:13
dnsmasq security update
2017-10-03 00:04:45
packetstorm
packetstorm
Dnsmasq 2-Byte Heap-Based Overflow
2017-10-02 00:00:00
redhat
redhat
(RHSA-2017:2839) Critical: dnsmasq security update
2017-10-02 13:35:14
(RHSA-2017:2838) Critical: dnsmasq security update
2017-10-02 13:34:58
(RHSA-2017:2841) Critical: dnsmasq security update
2017-10-02 13:35:44
alpinelinux
alpinelinux
CVE-2017-14491
2017-10-04 01:29:02
debiancve
debiancve
CVE-2017-14491
2017-10-04 01:29:02
zdt
zdt
Dnsmasq < 2.78 - 2-byte Heap-Based Overflow Exploit
2017-10-02 00:00:00
exploitpack
exploitpack
Dnsmasq 2.78 - 2-byte Heap Overflow
2017-10-02 00:00:00
checkpoint_advisories
checkpoint_advisories
DNSmasq Response Heap Buffer Overflow (CVE-2017-14491) - Ver2
2018-04-15 00:00:00
Dnsmasq Heap Based Overflow Remote Code Execution (CVE-2017-14491)
2017-10-03 00:00:00
seebug
seebug
Dnsmasq Heap based overflow(CVE-2017-14491)
2017-10-09 00:00:00
ubuntu
ubuntu
Dnsmasq vulnerabilities
2021-04-22 00:00:00
Dnsmasq vulnerabilities
2017-10-03 00:00:00
Dnsmasq vulnerabilities
2017-10-02 00:00:00
exploitdb
exploitdb
Dnsmasq < 2.78 - 2-byte Heap Overflow
2017-10-02 00:00:00
ics
ics
Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)
2020-10-13 12:00:00
Siemens SIMATIC
2024-03-14 12:00:00
cert
cert
Dnsmasq contains multiple vulnerabilities
2017-10-02 00:00:00
arista
arista
Security Advisory 0030
2017-10-02 00:00:00
suse
suse
Security update for dnsmasq (important)
2017-10-03 03:07:14
Security update for dnsmasq (important)
2017-10-02 21:09:17
Security update for dnsmasq (important)
2017-10-02 21:11:28
archlinux
archlinux
[ASA-201710-1] dnsmasq: multiple issues
2017-10-02 00:00:00
amazon
amazon
Critical: dnsmasq
2019-07-18 18:22:00
Critical: dnsmasq
2017-10-02 17:05:00
fedora
fedora
[SECURITY] Fedora 26 Update: dnsmasq-2.76-5.fc26
2017-10-06 15:22:33
[SECURITY] Fedora 27 Update: dnsmasq-2.77-9.fc27
2017-10-24 05:30:01
[SECURITY] Fedora 25 Update: dnsmasq-2.76-4.fc25
2017-10-23 22:52:39
gentoo
gentoo
Dnsmasq: Multiple vulnerabilities
2017-10-23 00:00:00
threatpost
threatpost
Google Warns of DoS and RCE Bugs in Dnsmasq
2017-10-03 13:16:06
mageia
mageia
Updated dnsmasq packages fix security vulnerabilities
2017-10-09 12:51:10
Updated dnsmasq packages fix security vulnerabilities
2017-10-09 12:51:10
photon
photon
Critical Photon OS Security Update - PHSA-2017-0074
2017-10-04 00:00:00
f5
f5
K32582354 : Multiple dnsmasq vulnerabilities
2017-10-05 00:00:00
myhack58
myhack58
slackware
slackware
[slackware-security] dnsmasq
2017-10-02 18:43:20
ibm
ibm
altlinux
altlinux
Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1
2017-10-06 00:00:00
huawei
huawei
Security Advisory - Seven vulnerabilities in Google Dnsmasq
2017-11-03 00:00:00
thn
thn
Google Finds 7 Security Flaws in Widely Used Dnsmasq Network Software
2017-10-02 23:44:00
freebsd
freebsd
dnsmasq -- multiple vulnerabilities
2017-10-02 00:00:00
nvidia
nvidia
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.303 Low
EPSS
Percentile
97.0%
Related for DEBIANCVE:CVE-2019-14513