Lucene search

K
freebsdFreeBSDB77B5646-A778-11E7-AC58-B499BAEBFEAF
HistoryOct 02, 2017 - 12:00 a.m.

dnsmasq -- multiple vulnerabilities

2017-10-0200:00:00
vuxml.freebsd.org
47

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.923

Percentile

99.0%

Google Project Zero reports:

CVE-2017-14491: Heap based overflow (2 bytes). Before 2.76 and this
commit overflow was unrestricted.
CVE-2017-14492: Heap based overflow.
CVE-2017-14493: Stack Based overflow.
CVE-2017-14494: Information Leak
CVE-2017-14495: Lack of free()
CVE-2017-14496: Invalid boundary checks. Integer underflow leading
to a huge memcpy.
CVE-2017-13704: Crash on large DNS query

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchdnsmasq< 2.78,1UNKNOWN
FreeBSDanynoarchdnsmasq-devel< 2.78UNKNOWN

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.923

Percentile

99.0%