CVE Catalog

CVE-2017-14492

Critical
Published: Translated: NVD NIST

Summary

Heap-based buffer overflow in dnsmasq before version 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

Risk Assessment

An attacker can exploit this vulnerability to remotely crash the service or execute malicious code, posing a serious security threat to the system.

Recommendation

It is recommended to update dnsmasq to version 2.78 or later to mitigate this vulnerability.

Original NVD description (English source)

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS