CVE-2015-8899
Fixed in a distro release EPSS 3%
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
Products: canonical ubuntu_linux, thekelleys dnsmasq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dnsmasq | 2.76-1 |
| Debian 13 | dnsmasq | 2.76-1 |
| Debian 14 | dnsmasq | 2.76-1 |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | dnsmasq | 2.71-6.3.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | dnsmasq | 2.71-13.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | dnsmasq | 2.71-13.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | dnsmasq | 2.78-0.16.5.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | dnsmasq | 2.78-0.16.5.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | dnsmasq | 2.78-0.16.5.1 |
| SUSE Linux Enterprise Server 11 SP4 | dnsmasq | 2.71-0.16.3 |
| SUSE Linux Enterprise Server 11 SP4 | dnsmasq | 2.78-0.17.5.1 |
| SUSE Linux Enterprise Server 12 SP1 | dnsmasq | 2.71-13.1 |
| SUSE Linux Enterprise Server 12 SP2 | dnsmasq | 2.71-13.1 |
| SUSE Linux Enterprise Server 12-LTSS | dnsmasq | 2.78-6.6.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | dnsmasq | 2.71-13.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | dnsmasq | 2.71-0.16.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | dnsmasq | 2.78-0.17.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | dnsmasq | 2.71-13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | dnsmasq | 2.71-13.1 |
| SUSE OpenStack Cloud 6 | dnsmasq | 2.71-13.1 |
| Ubuntu 16.04 LTS | dnsmasq | 2.75-1ubuntu0.16.04.1 |
| openSUSE Tumbleweed | dnsmasq | 2.76-1.3 |