CVE-2017-14496

—

CVSS 3.0

7.5 high

EPSS

66%p99

Published

Oct 3, 2017 (Oct 3, 2017)

Modified

Jun 17, 2026

Description

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.

Vendors: canonical debian google novell redhat thekelleys
Products: ubuntu linux, debian linux, android, leap, enterprise linux desktop, enterprise linux server, enterprise linux workstation, dnsmasq
Weakness: CWE-191
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (66.3%)

In the news2 stories

Google Finds 7 Security Flaws in Widely Used Dnsmasq Network Software

The Hacker NewsOct 3, 10:44 UTC · Oct 3, 2017Exploit / PoC CVE-2017-14491 CVE-2017-14492 CVE-2017-14493+4 CVEs

Recently Patched Dnsmasq still affect Siemens Industrial devices

Security AffairsNov 29, 14:38 UTC · Nov 29, 2017Vulnerability CVE-2017-13704 CVE-2017-14495 CVE-2017-14496+1 CVEs