Memory leak in Dnsmasq - CVE-2017-14494

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU8663

Memory leak in Dnsmasq - CVE-2017-14494

Published: October 3, 2017


Vulnerability identifier: #VU8663
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-14494
CWE-ID: CWE-401
Exploitation vector: Adjecent network
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to memory leak when processing DHCPv6 requests. A remote unauthenticated attacker on local network can send specially crafted DHCPv6 request to the affected service and cause dnsmasq to forward memory from outside the packet buffer to a DHCPv6 server when acting as a relay.

Successful exploitation of this vulnerability may allow an attacker to read parts of memory from the affected system and bypass ASLR.


Affected software

Dnsmasq
Debian Linux
Amazon Linux AMI
Gentoo Linux
Arch Linux
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux EUS Compute Node
SUSE Linux
Ubuntu
Slackware Linux
Fedora
dnsmasq (Alpine package)
dnsmasq
Edgeline EL300 Converged Edge System

How to mitigate CVE-2017-14494

Update to version 2.78.

dnsmasq (Alpine package) - addressed in versions 2.76-r1, 2.76-r2
Edgeline EL300 Converged Edge System - update to 1.50
dnsmasq - addressed in versions 2.76-4.fc25, 2.76-5.fc26, 2.77-9.fc27

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins