PT-2015-7825 · Dnsmasq+3 · Dnsmasq+3

Edwin Török · Publicado 2015-12-31 · Atualizado 2024-06-15 · CVE-2015-8899

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dnsmasq versions prior to 2.76

Description The issue allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.

Recommendations For versions prior to 2.76, update to version 2.76 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2016-1523

CVE-2015-8899

OPENSUSE-SU-2017_0016-1

OPENSUSE-SU-2024:10195-1

SUSE-SU-2016:3199-1

SUSE-SU-2016:3257-1

SUSE-SU-2016:3269-1

SUSE-SU-2016_3199-1

SUSE-SU-2016_3269-1

SUSE-SU-2017:2616-1

SUSE-SU-2017:2617-1

SUSE-SU-2017:2619-1

USN-3009-1

Produtos afetados

Alt Linux

Dnsmasq

Suse

Ubuntu

Referências · 62

• https://github.com/Slovejoy/dnsmasq-pre2.76 · Nota
• https://suse.com/security/cve/CVE-2017-14493 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8899 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-8899 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20163199-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:2616-1 · Aviso do Fabricante
• http://securitytracker.com/id/1036045 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/V4QQ3QGHNRXTBAMOHKFMALDAVHFZ4WAK · Nota
• https://bugzilla.suse.com/1060355 · Nota
• https://bugzilla.suse.com/904537 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2016:3269-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-14491 · Nota
• http://ubuntu.com/usn/USN-3009-1 · Aviso do Fabricante
• http://securityfocus.com/bid/91031 · Nota
• https://ubuntu.com/security/CVE-2015-8899 · Aviso do Fabricante