CVE Catalog

CVE-2017-14493

Critical
Published: Translated: NVD NIST

Summary

A stack-based buffer overflow in dnsmasq before version 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.

Risk Assessment

Attackers can remotely trigger a service crash or gain control over the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update dnsmasq to version 2.78 or later to mitigate this vulnerability.

Original NVD description (English source)

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS