CVE-2017-14491

CRITICAL9.8EPSS 33.7%

dnsmasq - security update

Published: 10/4/2017Modified: 4/28/2026

Description

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Affected packages (4)

Alpine/dnsmasqfrom 0, < 2.78-r0
Debian/dnsmasqfrom 0, < 2.78-1
Debian/dnsmasqfrom 0, < 2.62-3+deb7u4
Debian/dnsmasqfrom 0, < 2.72-3+deb8u2

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	CRITICAL9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2017-14491
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2017-14491