CVE-2017-14493: Buffer Overflow
Red Hat Product Security has been made aware of a stack-based buffer overflow affecting the DHCP implementation of dnsmasq.
Other sources
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14493?
CVE-2017-14493 has a high severity level due to its potential for remote code execution and denial of service.
How do I fix CVE-2017-14493?
To fix CVE-2017-14493, update dnsmasq to version 2.80 or later on affected systems.
Which versions of dnsmasq are vulnerable to CVE-2017-14493?
Versions of dnsmasq prior to 2.78, including any pre-release versions, are vulnerable to CVE-2017-14493.
What kind of attack is possible through CVE-2017-14493?
CVE-2017-14493 allows attackers to exploit the vulnerability using crafted DHCPv6 requests to execute arbitrary code.
On which operating systems does CVE-2017-14493 affect dnsmasq?
CVE-2017-14493 affects dnsmasq on various operating systems, including Debian, Red Hat, Ubuntu, and openSUSE.