CVE-2017-13704: Input Validation
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13704?
CVE-2017-13704 has been classified as a high severity vulnerability due to its ability to cause a crash in dnsmasq.
How do I fix CVE-2017-13704?
To fix CVE-2017-13704, update dnsmasq to version 2.78 or later.
What systems are affected by CVE-2017-13704?
CVE-2017-13704 affects various versions of dnsmasq prior to 2.78 on systems like Ubuntu, Debian, Fedora, and Red Hat.
What does CVE-2017-13704 exploit in dnsmasq?
CVE-2017-13704 exploits improper handling of DNS packet sizes, leading to a crash due to an erroneous memset call.
Is there a workaround for CVE-2017-13704 until I can update?
As a temporary workaround for CVE-2017-13704, consider restricting external DNS queries or disabling the dnsmasq service until an update can be applied.