PT-2015-1142 · Dnsmasq+3 · Dnsmasq+3
Nick Sampanis
·
Publicado
2015-04-07
·
Atualizado
2024-06-15
·
CVE-2015-3294
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Dnsmasq versions prior to 2.73rc4
Description
The issue allows remote attackers to cause a denial of service and potentially read process memory due to a malfunction in handling DNS requests. This can occur when a malformed DNS request is sent, leading to an out-of-bounds read and crash. The problem is related to the
tcp request function not properly handling the return value of the setup reply function.Recommendations
For versions prior to 2.73rc4, update to version 2.73rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the DNS server to minimize the risk of exploitation.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Dnsmasq
Suse
Ubuntu