PT-2015-7825 · Dnsmasq+3 · Dnsmasq+3

Edwin Török · Published 2015-12-31 · Updated 2024-06-15 · CVE-2015-8899

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dnsmasq versions prior to 2.76

Description The issue allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.

Recommendations For versions prior to 2.76, update to version 2.76 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2016-1523

CVE-2015-8899

OPENSUSE-SU-2017_0016-1

OPENSUSE-SU-2024:10195-1

SUSE-SU-2016:3199-1

SUSE-SU-2016:3257-1

SUSE-SU-2016:3269-1

SUSE-SU-2016_3199-1

SUSE-SU-2016_3269-1

SUSE-SU-2017:2616-1

SUSE-SU-2017:2617-1

SUSE-SU-2017:2619-1

USN-3009-1

Affected Products

Alt Linux

Dnsmasq

Suse

Ubuntu

References · 62

• https://nvd.nist.gov/vuln/detail/CVE-2015-8899 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2017:2616-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3269-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-3009-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8899 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-8899 · Security Note
• https://osv.dev/vulnerability/CVE-2015-8899 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8899 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/629206 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:3257-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3199-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8899 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02883 · Security Note
• https://ubuntu.com/security/notices/USN-3009-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2617-1 · Vendor Advisory