Most recent entries from all

bdu:2022-07423

Withdrawn: BELL-CVE-2017-13704 — CVE-2017-13704 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2017-avi-329 — De multiples vulnérabilités ont été découvertes dans Dnsmasq . Elles permettent à un attaquant de provoquer une exécuti…

certfr-2017-avi-329

Withdrawn: CLEANSTART-2026-KY78316 — dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DN…

Withdrawn by the publisher.

Affected: CleanStart: dnsmasq

Multiple security vulnerabilities affect the dnsmasq package. dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. See references for individual vulnerability details.

cnvd-2017-29272

EUVD-2026-77616

fkie_cve-2017-13704

In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.

GHSA-mprq-hpvv-8wcc

gsd-2017-13704

ICSA-17-332-01 — Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)

An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp. An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp. An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp. An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp.

Withdrawn: UBUNTU-CVE-2017-13704

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: dnsmasq, Ubuntu:16.04:LTS: dnsmasq