CVE-2017-14496

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html · Issue Tracking
• nvidia.custhelp.com/app/answers/detail/a_id/4561
• thekelleys.org.uk/dnsmasq/CHANGELOG · Release Notes
• thekelleys.org.uk/gitweb
• arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
• debian.org/security/2017/dsa-3989 · Third Party Advisory
• securityfocus.com/bid/101085 · Third Party Advisory
• securityfocus.com/bid/101977
• securitytracker.com/id/1039474 · Third Party Advisory
• ubuntu.com/usn/USN-3430-1 · Third Party Advisory
• ubuntu.com/usn/USN-3430-2 · Third Party Advisory
• access.redhat.com/errata/RHSA-2017:2836 · Patch
• access.redhat.com/security/vulnerabilities/3199382 · Issue Tracking
• cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
• security.gentoo.org/glsa/201710-27
• security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html · Third Party Advisory
• source.android.com/security/bulletin/2017-10-01 · Third Party Advisory
• exploit-db.com/exploits/42946 · Third Party Advisory
• kb.cert.org/vuls/id/973527 · Third Party Advisory
• mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html
• mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html
• synology.com/support/security/Synology_SA_17_59_Dnsmasq

dnsmasq のその他の脆弱性

• CVE-2026-12969中 5.3An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name(…
• CVE-2026-12725中 5.9A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replie…
• CVE-2023-49441高 7.5dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.
• CVE-2023-50387高 7.5Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of ser…
• CVE-2023-28450高 7.5An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS…