Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-14491

Fixed in a distro release EPSS 86%

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Published 2017-10-02 · CVE record · OSV

Products: thekelleys dnsmasq, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, canonical ubuntu_linux, debian_linux, opensuse leap, suse linux_enterprise_debuginfo, suse linux_enterprise_point_of_sale, suse linux_enterprise_server, nvidia linux_for_tegra, nvidia geforce_experience, huawei honor_v9_play_firmware, arista eos, siemens ruggedcom_rm1224_firmware, siemens scalance_m-800_firmware, siemens scalance_s615_firmware, siemens scalance_w1750d_firmware, arubanetworks arubaos, synology router_manager, synology diskstation_manager

Distro releases

ReleasePackageFixed in
Alpine 3.10dnsmasq2.78-r0
Alpine 3.11dnsmasq2.78-r0
Alpine 3.12dnsmasq2.78-r0
Alpine 3.13dnsmasq2.78-r0
Alpine 3.14dnsmasq2.78-r0
Alpine 3.15dnsmasq2.78-r0
Alpine 3.16dnsmasq2.78-r0
Alpine 3.17dnsmasq2.78-r0
Alpine 3.18dnsmasq2.78-r0
Alpine 3.19dnsmasq2.78-r0
Alpine 3.20dnsmasq2.78-r0
Alpine 3.21dnsmasq2.78-r0
Alpine 3.22dnsmasq2.78-r0
Alpine 3.23dnsmasq2.78-r0
Alpine 3.24dnsmasq2.78-r0
Alpine 3.3dnsmasq2.76-r1
Alpine 3.4dnsmasq2.76-r1
Alpine 3.5dnsmasq2.76-r2
Alpine 3.6dnsmasq2.76-r5
Alpine 3.7dnsmasq2.78-r0
Alpine 3.8dnsmasq2.78-r0
Alpine 3.9dnsmasq2.78-r0
Amazon Linux 2dnsmasq2.76-5.amzn2
Amazon Linux 2dnsmasq-utils2.76-5.amzn2
Arch Linuxdnsmasq2.78-1
Debian 12dnsmasq2.78-1
Debian 13dnsmasq2.78-1
Debian 14dnsmasq2.78-1
Debian 7dnsmasq2.62-3+deb7u4
Debian 8dnsmasq2.72-3+deb8u2
Debian 9dnsmasq2.76-5+deb9u1
Red Hat Enterprise Linux 6dnsmasq0:2.48-18.el6_9
Red Hat Enterprise Linux 6dnsmasq-debuginfo0:2.48-18.el6_9
Red Hat Enterprise Linux 6dnsmasq-utils0:2.48-18.el6_9
Red Hat Enterprise Linux 7dnsmasq0:2.76-2.el7_4.2
Red Hat Enterprise Linux 7dnsmasq-debuginfo0:2.76-2.el7_4.2
Red Hat Enterprise Linux 7dnsmasq-utils0:2.76-2.el7_4.2
Red Hat rhel aus 5.9dnsmasq0:2.45-2.el5_9.1
Red Hat rhel aus 5.9dnsmasq-debuginfo0:2.45-2.el5_9.1
Red Hat rhel aus 6.4dnsmasq0:2.48-13.el6_4.1
Red Hat rhel aus 6.4dnsmasq-debuginfo0:2.48-13.el6_4.1
Red Hat rhel aus 6.4dnsmasq-utils0:2.48-13.el6_4.1
Red Hat rhel aus 6.5dnsmasq0:2.48-13.el6_5.1
Red Hat rhel aus 6.5dnsmasq-debuginfo0:2.48-13.el6_5.1
Red Hat rhel aus 6.5dnsmasq-utils0:2.48-13.el6_5.1
Red Hat rhel aus 6.6dnsmasq0:2.48-14.el6_6.1
Red Hat rhel aus 6.6dnsmasq-debuginfo0:2.48-14.el6_6.1
Red Hat rhel aus 6.6dnsmasq-utils0:2.48-14.el6_6.1
Red Hat rhel els 5dnsmasq0:2.45-2.el5_11.1
Red Hat rhel els 5dnsmasq-debuginfo0:2.45-2.el5_11.1
Red Hat rhel eus 6.7dnsmasq0:2.48-16.el6_7.1
Red Hat rhel eus 6.7dnsmasq-debuginfo0:2.48-16.el6_7.1
Red Hat rhel eus 6.7dnsmasq-utils0:2.48-16.el6_7.1
Red Hat rhel eus 7.2dnsmasq0:2.66-14.el7_2.2
Red Hat rhel eus 7.2dnsmasq-debuginfo0:2.66-14.el7_2.2
Red Hat rhel eus 7.2dnsmasq-utils0:2.66-14.el7_2.2
Red Hat rhel eus 7.3dnsmasq0:2.66-21.el7_3.2
Red Hat rhel eus 7.3dnsmasq-debuginfo0:2.66-21.el7_3.2
Red Hat rhel eus 7.3dnsmasq-utils0:2.66-21.el7_3.2
Red Hat rhel mission critical 6.2dnsmasq0:2.48-5.el6_2.2
Red Hat rhel mission critical 6.2dnsmasq-debuginfo0:2.48-5.el6_2.2
Red Hat rhel tus 6.5dnsmasq0:2.48-13.el6_5.1
Red Hat rhel tus 6.5dnsmasq-debuginfo0:2.48-13.el6_5.1
Red Hat rhel tus 6.5dnsmasq-utils0:2.48-13.el6_5.1
Red Hat rhel tus 6.6dnsmasq0:2.48-14.el6_6.1
Red Hat rhel tus 6.6dnsmasq-debuginfo0:2.48-14.el6_6.1
Red Hat rhel tus 6.6dnsmasq-utils0:2.48-14.el6_6.1
SUSE Linux Enterprise Desktop 12 SP2dnsmasq2.78-18.3.1
SUSE Linux Enterprise Desktop 12 SP3dnsmasq2.78-18.3.1
SUSE Linux Enterprise Point of Sale 11 SP3dnsmasq2.78-0.16.5.1
SUSE Linux Enterprise Server 11 SP3-LTSSdnsmasq2.78-0.16.5.1
SUSE Linux Enterprise Server 11 SP3-TERADATAdnsmasq2.78-0.16.5.1
SUSE Linux Enterprise Server 11 SP4dnsmasq2.78-0.17.5.1
SUSE Linux Enterprise Server 12 SP1-LTSSdnsmasq2.78-18.3.1
SUSE Linux Enterprise Server 12 SP2dnsmasq2.78-18.3.1
SUSE Linux Enterprise Server 12 SP3dnsmasq2.78-18.3.1
SUSE Linux Enterprise Server 12-LTSSdnsmasq2.78-6.6.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2dnsmasq2.78-18.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4dnsmasq2.78-0.17.5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1dnsmasq2.78-18.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2dnsmasq2.78-18.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3dnsmasq2.78-18.3.1
SUSE OpenStack Cloud 6dnsmasq2.78-18.3.1
SUSE OpenStack Cloud 7dnsmasq2.78-18.3.1
Ubuntu 14.04 LTSdnsmasq2.68-1ubuntu0.2
Ubuntu 16.04 LTSdnsmasq2.75-1ubuntu0.16.04.3
openSUSE Tumbleweeddnsmasq2.86-1.1