CVE-2017-14494: Infoleak
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
Other sources
Red Hat Product Security has been made aware of an information leak vulnerability affecting the DHCP implementation of dnsmasq.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14494?
CVE-2017-14494 has been classified as a medium severity vulnerability due to its potential for information leakage.
How do I fix CVE-2017-14494?
To fix CVE-2017-14494, upgrade dnsmasq to version 2.80 or later.
What versions of dnsmasq are affected by CVE-2017-14494?
Affected versions include dnsmasq versions prior to 2.78 and those up to 2.77.
Can CVE-2017-14494 be exploited remotely?
Yes, CVE-2017-14494 can be exploited remotely by attackers through malicious DHCPv6 requests.
Which operating systems are impacted by CVE-2017-14494?
CVE-2017-14494 affects various versions of dnsmasq across Debian, Ubuntu, and Red Hat operating systems.