CVE-2008-3350

MEDIO 5.0CVE-2008-3350 · Published 28/07/2008 · updated 16/06/2026

In breve

CVE-2008-3350 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda dnsmasq (the kelleys).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 77.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dnsmasq the_kelleys	`= 2.43`	No fix yet

Description

dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (2) attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214.

References

article.gmane.org/gmane.network.dns.dnsmasq.general/2189 · Patch
secunia.com/advisories/31197 · Vendor Advisory
thekelleys.org.uk/dnsmasq/CHANGELOG
vupen.com/english/advisories/2008/2166
exchange.xforce.ibmcloud.com/vulnerabilities/43957
exchange.xforce.ibmcloud.com/vulnerabilities/43960

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free