CVE-2017-14495: High severity ubuntu vulnerability
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
Other sources
Red Hat Product Security has been made aware of an Denial of Service vulnerability affecting the DNS implementation of dnsmasq.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14495?
CVE-2017-14495 has a severity that allows remote attackers to cause a denial of service through memory consumption.
How do I fix CVE-2017-14495?
To fix CVE-2017-14495, upgrade dnsmasq to version 2.78 or higher depending on your operating system.
Which versions of dnsmasq are affected by CVE-2017-14495?
Versions of dnsmasq before 2.78, specifically those utilizing the --add-mac, --add-cpe-id, or --add-subnet options, are affected.
Can CVE-2017-14495 be exploited remotely?
Yes, CVE-2017-14495 can be exploited remotely, allowing attackers to trigger a denial of service.
What systems are impacted by CVE-2017-14495?
CVE-2017-14495 impacts several Linux distributions, including specific versions of Debian and Ubuntu.