CVE-2008-3350: Medium severity dnsmasq vulnerability
Published Jul 28, 2008
·Updated
dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (2) attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214.
Affected Software
1 affected component
The Kelleys Dnsmasq=2.43
Remediation
Event History
Jul 28, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3350?
CVE-2008-3350 is categorized as a denial of service vulnerability that can crash the dnsmasq daemon.
2
How do I fix CVE-2008-3350?
To remediate CVE-2008-3350, upgrade dnsmasq to the latest version beyond 2.43.
3
What versions of dnsmasq are affected by CVE-2008-3350?
CVE-2008-3350 affects dnsmasq version 2.43 specifically.
4
Can CVE-2008-3350 be exploited remotely?
Yes, CVE-2008-3350 can be exploited by remote attackers under certain conditions related to DHCP requests.
5
What are the attack vectors for CVE-2008-3350?
The attack vectors for CVE-2008-3350 include sending a DHCPINFORM without a lease or renewing a nonexistent DHCP lease.