Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | dnsmasq | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::client | dnsmasq-debuginfo | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::client | dnsmasq-utils | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | dnsmasq | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | dnsmasq-debuginfo | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | dnsmasq-utils | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::server | dnsmasq | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::server | dnsmasq-debuginfo | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::server | dnsmasq-utils | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | dnsmasq | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | dnsmasq-debuginfo | 0:2.76-2.el7_4.2 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | dnsmasq-utils | 0:2.76-2.el7_4.2 |
Vulnerabilities 6
-
Unscored —
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…
-
Unscored —
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…
-
Unscored —
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or exec…
-
Unscored —
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vec…
-
Unscored —
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote…
-
Unscored —
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-s…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
article
https://access.redhat.com/security/vulnerabilities/3199382
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495409
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495410
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495411
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495412
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495415
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495416
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2836.json
-
report
https://access.redhat.com/security/cve/CVE-2017-14491
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14491
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14491
-
article
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
-
report
https://access.redhat.com/security/cve/CVE-2017-14492
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14492
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14492
-
report
https://access.redhat.com/security/cve/CVE-2017-14493
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14493
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14493
-
report
https://access.redhat.com/security/cve/CVE-2017-14494
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14494
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14494
-
report
https://access.redhat.com/security/cve/CVE-2017-14495
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14495
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14495
-
report
https://access.redhat.com/security/cve/CVE-2017-14496
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14496
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14496