CVE-2017-13704
Fixed in a distro release EPSS 65%
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.
Products: canonical ubuntu_linux, debian_linux, fedoraproject fedora, novell leap, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, thekelleys dnsmasq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | dnsmasq | 2.78-r0 |
| Alpine 3.11 | dnsmasq | 2.78-r0 |
| Alpine 3.12 | dnsmasq | 2.78-r0 |
| Alpine 3.13 | dnsmasq | 2.78-r0 |
| Alpine 3.14 | dnsmasq | 2.78-r0 |
| Alpine 3.15 | dnsmasq | 2.78-r0 |
| Alpine 3.16 | dnsmasq | 2.78-r0 |
| Alpine 3.17 | dnsmasq | 2.78-r0 |
| Alpine 3.18 | dnsmasq | 2.78-r0 |
| Alpine 3.19 | dnsmasq | 2.78-r0 |
| Alpine 3.20 | dnsmasq | 2.78-r0 |
| Alpine 3.21 | dnsmasq | 2.78-r0 |
| Alpine 3.22 | dnsmasq | 2.78-r0 |
| Alpine 3.23 | dnsmasq | 2.78-r0 |
| Alpine 3.24 | dnsmasq | 2.78-r0 |
| Alpine 3.7 | dnsmasq | 2.78-r0 |
| Alpine 3.8 | dnsmasq | 2.78-r0 |
| Alpine 3.9 | dnsmasq | 2.78-r0 |
| Debian 12 | dnsmasq | 2.78-1 |
| Debian 13 | dnsmasq | 2.78-1 |
| Debian 14 | dnsmasq | 2.78-1 |