Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode | dnsmasq | 0:2.66-14.el7_2.2 |
| Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode | dnsmasq-debuginfo | 0:2.66-14.el7_2.2 |
| Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode | dnsmasq-utils | 0:2.66-14.el7_2.2 |
| Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server | dnsmasq | 0:2.66-14.el7_2.2 |
| Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server | dnsmasq-debuginfo | 0:2.66-14.el7_2.2 |
| Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server | dnsmasq-utils | 0:2.66-14.el7_2.2 |
| Red Hat · RHEL 7.3 EUS rhel_eus:7.3::computenode | dnsmasq | 0:2.66-21.el7_3.2 |
| Red Hat · RHEL 7.3 EUS rhel_eus:7.3::computenode | dnsmasq-debuginfo | 0:2.66-21.el7_3.2 |
| Red Hat · RHEL 7.3 EUS rhel_eus:7.3::computenode | dnsmasq-utils | 0:2.66-21.el7_3.2 |
| Red Hat · RHEL 7.3 EUS rhel_eus:7.3::server | dnsmasq | 0:2.66-21.el7_3.2 |
| Red Hat · RHEL 7.3 EUS rhel_eus:7.3::server | dnsmasq-debuginfo | 0:2.66-21.el7_3.2 |
| Red Hat · RHEL 7.3 EUS rhel_eus:7.3::server | dnsmasq-utils | 0:2.66-21.el7_3.2 |
Vulnerabilities 4
-
Unscored —
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…
-
Unscored —
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…
-
Unscored —
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or exec…
-
Unscored —
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vec…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
article
https://access.redhat.com/security/vulnerabilities/3199382
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495409
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495410
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495411
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1495412
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2837.json
-
report
https://access.redhat.com/security/cve/CVE-2017-14491
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14491
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14491
-
article
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
-
report
https://access.redhat.com/security/cve/CVE-2017-14492
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14492
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14492
-
report
https://access.redhat.com/security/cve/CVE-2017-14493
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14493
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14493
-
report
https://access.redhat.com/security/cve/CVE-2017-14494
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14494
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14494