Lucene search
Veracode Vulnerability DatabaseVERACODE:22819HistoryMar 28, 2020 - 2:00 a.m.
Information Disclosure
2020-03-2802:00:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
22
EPSS
0.303
Percentile
97.0%
dnsmasq is vulnerable to information disclosure. An attacker-controlled DNS server is able to read beyond the buffer that is allocated for the packet, on a victim server, by sending malicious DNS packets to the DNS server. This vulnerability is different from CVE-2017-14491.
References
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
access.redhat.com/errata/RHBA-2017:2117
access.redhat.com/security/cve/CVE-2019-14513
bugzilla.redhat.com/show_bug.cgi?id=1375569
bugzilla.redhat.com/show_bug.cgi?id=1398337
bugzilla.redhat.com/show_bug.cgi?id=1443139
github.com/Slovejoy/dnsmasq-pre2.76
lists.debian.org/debian-lts-announce/2019/09/msg00013.html
Related
ubuntucve
ubuntucve
CVE-2019-14513
2019-08-01 00:00:00
CVE-2017-14491
2017-10-02 00:00:00
osv
osv
CVE-2019-14513
2019-08-01 21:15:12
dnsmasq - security update
2019-09-13 00:00:00
CVE-2017-14491
2017-10-04 01:29:02
cve
cve
CVE-2019-14513
2019-08-01 21:15:12
CVE-2017-14491
2017-10-04 01:29:02
redhatcve
redhatcve
CVE-2019-14513
2019-08-09 10:22:08
CVE-2017-14491
2020-04-09 10:43:20
debiancve
debiancve
CVE-2019-14513
2019-08-01 21:15:12
CVE-2017-14491
2017-10-04 01:29:02
cvelist
cvelist
CVE-2019-14513
2019-08-01 20:47:48
CVE-2017-14491
2017-10-02 21:00:00
nvd
nvd
CVE-2019-14513
2019-08-01 21:15:12
CVE-2017-14491
2017-10-04 01:29:02
prion
prion
Out-of-bounds
2019-08-01 21:15:00
Heap overflow
2017-10-04 01:29:00
debian
debian
[SECURITY] [DLA 1921-1] dnsmasq security update
2019-09-13 12:40:28
[SECURITY] [DLA 1124-1] dnsmasq security update
2017-10-06 14:42:23
[SECURITY] [DSA 3989-1] dnsmasq security update
2017-10-02 18:30:02
openvas
openvas
Dnsmasq < 2.76 DoS Vulnerability
2019-08-06 00:00:00
Debian: Security Advisory (DLA-1921-1)
2019-09-14 00:00:00
CentOS Update for dnsmasq CESA-2017:2838 centos6
2017-10-05 00:00:00
nessus
nessus
Debian DLA-1921-1 : dnsmasq security update
2019-09-16 00:00:00
Oracle Linux 6 : dnsmasq (ELSA-2017-2838)
2017-10-03 00:00:00
RHEL 6 : dnsmasq (RHSA-2017:2839)
2017-10-03 00:00:00
checkpoint_advisories
checkpoint_advisories
DNSmasq Response Heap Buffer Overflow (CVE-2017-14491) - Ver2
2018-04-15 00:00:00
Dnsmasq Heap Based Overflow Remote Code Execution (CVE-2017-14491)
2017-10-03 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:19:03
Remote Code Execution (RCE)
2017-10-11 22:25:25
redhat
redhat
(RHSA-2017:2841) Critical: dnsmasq security update
2017-10-02 13:35:44
(RHSA-2017:2840) Critical: dnsmasq security update
2017-10-02 13:35:27
(RHSA-2017:2839) Critical: dnsmasq security update
2017-10-02 13:35:14
seebug
seebug
Dnsmasq Heap based overflow(CVE-2017-14491)
2017-10-09 00:00:00
centos
centos
dnsmasq security update
2017-10-02 23:34:13
dnsmasq security update
2017-10-03 00:04:45
oraclelinux
oraclelinux
dnsmasq security update
2017-10-03 00:00:00
dnsmasq security update
2017-10-02 00:00:00
dnsmasq security update
2017-10-02 00:00:00
packetstorm
packetstorm
Dnsmasq 2-Byte Heap-Based Overflow
2017-10-02 00:00:00
exploitdb
exploitdb
Dnsmasq < 2.78 - 2-byte Heap Overflow
2017-10-02 00:00:00
alpinelinux
alpinelinux
CVE-2017-14491
2017-10-04 01:29:02
zdt
zdt
Dnsmasq < 2.78 - 2-byte Heap-Based Overflow Exploit
2017-10-02 00:00:00
exploitpack
exploitpack
Dnsmasq 2.78 - 2-byte Heap Overflow
2017-10-02 00:00:00
ubuntu
ubuntu
Dnsmasq vulnerabilities
2021-04-22 00:00:00
Dnsmasq vulnerabilities
2017-10-03 00:00:00
Dnsmasq regression
2018-01-04 00:00:00
ics
ics
Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)
2020-10-13 12:00:00
Siemens SIMATIC
2024-03-14 12:00:00
suse
suse
Security update for dnsmasq (important)
2017-10-03 03:07:14
Security update for dnsmasq (important)
2017-10-02 21:09:17
Security update for dnsmasq (important)
2017-10-02 21:07:18
gentoo
gentoo
Dnsmasq: Multiple vulnerabilities
2017-10-23 00:00:00
amazon
amazon
Critical: dnsmasq
2017-10-02 17:05:00
Critical: dnsmasq
2019-07-18 18:22:00
cert
cert
Dnsmasq contains multiple vulnerabilities
2017-10-02 00:00:00
arista
arista
Security Advisory 0030
2017-10-02 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: dnsmasq-2.76-5.fc26
2017-10-06 15:22:33
[SECURITY] Fedora 27 Update: dnsmasq-2.77-9.fc27
2017-10-24 05:30:01
[SECURITY] Fedora 25 Update: dnsmasq-2.76-4.fc25
2017-10-23 22:52:39
archlinux
archlinux
[ASA-201710-1] dnsmasq: multiple issues
2017-10-02 00:00:00
mageia
mageia
Updated dnsmasq packages fix security vulnerabilities
2017-10-09 12:51:10
Updated dnsmasq packages fix security vulnerabilities
2017-10-09 12:51:10
freebsd
freebsd
dnsmasq -- multiple vulnerabilities
2017-10-02 00:00:00
thn
thn
Google Finds 7 Security Flaws in Widely Used Dnsmasq Network Software
2017-10-02 23:44:00
threatpost
threatpost
Google Warns of DoS and RCE Bugs in Dnsmasq
2017-10-03 13:16:06
photon
photon
Critical Photon OS Security Update - PHSA-2017-0074
2017-10-04 00:00:00
slackware
slackware
[slackware-security] dnsmasq
2017-10-02 18:43:20
ibm
ibm
f5
f5
K32582354 : Multiple dnsmasq vulnerabilities
2017-10-05 00:00:00
myhack58
myhack58
huawei
huawei
Security Advisory - Seven vulnerabilities in Google Dnsmasq
2017-11-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1
2017-10-06 00:00:00
nvidia
nvidia