FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

dnsmasq -- multiple vulnerabilities

Affected packages
	dnsmasq	<	2.78,1
	dnsmasq-devel	<	2.78

Details

VuXML ID	b77b5646-a778-11e7-ac58-b499baebfeaf
Discovery	2017-10-02
Entry	2017-10-02

Google Project Zero reports:

CVE-2017-14491: Heap based overflow (2 bytes). Before 2.76 and this commit overflow was unrestricted.

CVE-2017-14492: Heap based overflow.

CVE-2017-14493: Stack Based overflow.

CVE-2017-14494: Information Leak

CVE-2017-14495: Lack of free()

CVE-2017-14496: Invalid boundary checks. Integer underflow leading to a huge memcpy.

CVE-2017-13704: Crash on large DNS query

[source]

References

CVE Name	CVE-2017-13704
CVE Name	CVE-2017-14491
CVE Name	CVE-2017-14492
CVE Name	CVE-2017-14493
CVE Name	CVE-2017-14494
CVE Name	CVE-2017-14495
CVE Name	CVE-2017-14496
URL	https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html