CVE-2017-14492: Buffer Overflow
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
Other sources
Red Hat Product Security has been made aware of a heap-based buffer overflow affecting the DHCP implementation of dnsmasq.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14492?
CVE-2017-14492 is classified as a high severity vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-2017-14492?
To mitigate CVE-2017-14492, update dnsmasq to version 2.80-1+deb10u1 or later, or 2.78 or later on Red Hat systems.
Which software is affected by CVE-2017-14492?
CVE-2017-14492 affects dnsmasq versions prior to 2.78, including various distributions of Linux such as Debian and Ubuntu.
What type of vulnerability is CVE-2017-14492?
CVE-2017-14492 is a heap-based buffer overflow vulnerability impacting the DHCP implementation in dnsmasq.
Can CVE-2017-14492 lead to denial of service?
Yes, CVE-2017-14492 can lead to denial of service by crashing the dnsmasq service when a malformed IPv6 router advertisement is received.