Vulnerability identifier: #VU8663

Vulnerability risk: Low

CVSSv3.1:

CVE-ID: CVE-2017-14494

CWE-ID: CWE-401

Exploitation vector: Local network

Exploit availability: Yes

Vulnerable software:
Dnsmasq
Server applications / DNS servers

Vendor: GNU

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to memory leak when processing DHCPv6 requests. A remote unauthenticated attacker on local network can send specially crafted DHCPv6 request to the affected service and cause dnsmasq to forward memory from outside the packet buffer to a DHCPv6 server when acting as a relay.

Successful exploitation of this vulnerability may allow an attacker to read parts of memory from the affected system and bypass ASLR.

Mitigation
Update to version 2.78.

Vulnerable software versions

Dnsmasq: 0.4 - 2.77

---

CPE

• cpe:2.3:a:gnu:dnsmasq:2.77:*:*:*:*:*:*:*

External links
http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2017q4/011771.html
http://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html

---

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?