| Errata ID | 481 |
|---|---|
| Date | 2017-11-08 |
| Source package | dnsmasq |
| Fixed in version | 2.62-3.6.201710301745 |
| Description | This update addresses the following issues: * Crash on receipt of certain malformed DNS requests (CVE-2015-3294) * Heap-based buffer overflow allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response (CVE-2017-14491) * Heap-based buffer overflow allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request (CVE-2017-14492) * When configured as a relay, dnsmasq allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests (CVE-2017-14494) |
| Additional notes | |
| CVE ID | CVE-2015-3294 CVE-2017-14491 CVE-2017-14492 CVE-2017-14494 |
| UCS Bug number | #38379 |
