CVE-2008-3214: Input Validation
Published Jul 18, 2008
·Updated
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
Affected Software
1 affected component
thekelleys dnsmasq=2.25
Event History
Jul 18, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3214?
CVE-2008-3214 has a medium severity as it can lead to a denial of service by crashing the dnsmasq daemon.
2
How do I fix CVE-2008-3214?
To fix CVE-2008-3214, upgrade dnsmasq to the latest version beyond 2.25 that addresses this vulnerability.
3
What systems are affected by CVE-2008-3214?
CVE-2008-3214 specifically affects dnsmasq version 2.25.
4
What are the attack vectors for CVE-2008-3214?
Attackers can exploit CVE-2008-3214 by renewing nonexistent leases or sending invalid DHCP requests.
5
Can CVE-2008-3214 be exploited remotely?
Yes, CVE-2008-3214 can be exploited remotely to cause a denial of service.