CVE Catalog

CVE-2017-14491

Critical
Published: Translated: NVD NIST

Summary

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Risk Assessment

Attackers can exploit this vulnerability to remotely take control of the system or disrupt its operation, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to update dnsmasq to version 2.78 or later to mitigate this vulnerability.

Original NVD description (English source)

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS