PT-2015-1142 · Dnsmasq+3 · Dnsmasq+3

Nick Sampanis · Published 2015-04-07 · Updated 2024-06-15 · CVE-2015-3294

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Dnsmasq versions prior to 2.73rc4

Description The issue allows remote attackers to cause a denial of service and potentially read process memory due to a malfunction in handling DNS requests. This can occur when a malformed DNS request is sent, leading to an out-of-bounds read and crash. The problem is related to the tcp request function not properly handling the return value of the setup reply function.

Recommendations For versions prior to 2.73rc4, update to version 2.73rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the DNS server to minimize the risk of exploitation.

Exploit

Fix

DoS

Weakness Enumeration

CWE-19

Related Identifiers

ALT-PU-2015-1664

BDU:2015-10027

CVE-2015-3294

DLA-225-1

DSA-3251-1

DSA-3251-2

MGASA-2015-0214

OPENSUSE-SU-2024:10195-1

SUSE-SU-2015:0979-1

SUSE-SU-2015:0979-2

SUSE-SU-2015:1015-1

SUSE-SU-2015_0979-1

SUSE-SU-2015_1015-1

SUSE-SU-2017:2616-1

SUSE-SU-2017:2617-1

SUSE-SU-2017:2619-1

USN-2593-1

Affected Products

Alt Linux

Dnsmasq

Suse

Ubuntu

References · 72

• 🔥 http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2015q2/009382.html · Exploit
• https://cve.org/CVERecord?id=CVE-2015-3294 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-3294 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:0979-2 · Vendor Advisory
• https://security.gentoo.org/glsa/201512-01 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2593-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3294 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3251-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/dnsmasq · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2616-1 · Vendor Advisory
• http://debian.org/security/2015/dsa-3251 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-3294 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-3294 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2617-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10027 · Security Note