CVE-2017-14496: Integer Underflow
Integer underflow in the addpseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
Other sources
Red Hat Product Security has been made aware of a Denial of Service vulnerability affecting the DNS implementation of dnsmasq.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14496?
CVE-2017-14496 has a severity rating that indicates it can result in a denial of service.
How do I fix CVE-2017-14496?
To fix CVE-2017-14496, upgrade to dnsmasq version 2.78 or later depending on your distribution.
What is the impact of CVE-2017-14496?
CVE-2017-14496 allows remote attackers to exploit an integer underflow vulnerability leading to denial of service.
Which versions of dnsmasq are affected by CVE-2017-14496?
Versions of dnsmasq prior to 2.78 are affected by CVE-2017-14496.
Can CVE-2017-14496 be exploited remotely?
Yes, CVE-2017-14496 can be exploited remotely through crafted DNS requests.