CVE-2017-13704

Опубликовано: 03 окт. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.

Ссылки

http://thekelleys.org.uk/dnsmasq/CHANGELOG
Release Notes
Vendor Advisory
http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=63437ffbb58837b214b4b92cb1c54bc5f3279928
http://www.securityfocus.com/bid/101085
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/101977
http://www.securitytracker.com/id/1039474
Third Party Advisory
VDB Entry
https://access.redhat.com/security/vulnerabilities/3199382
Issue Tracking
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TK6DWC53WSU6633EVZL7H4PCWBYHMHK/
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
Third Party Advisory
https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html
https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html
https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
http://thekelleys.org.uk/dnsmasq/CHANGELOG
Release Notes
Vendor Advisory
http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=63437ffbb58837b214b4b92cb1c54bc5f3279928
http://www.securityfocus.com/bid/101085
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/101977
http://www.securitytracker.com/id/1039474
Third Party Advisory
VDB Entry
https://access.redhat.com/security/vulnerabilities/3199382
Issue Tracking
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TK6DWC53WSU6633EVZL7H4PCWBYHMHK/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*

cpe:2.3:o:novell:leap:42.2:*:*:*:*:*:*:*

cpe:2.3:o:novell:leap:42.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*

Версия до 2.77 (включая)

EPSS

Процентиль: 99%

0.6541

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-13704

CVSS3: 7.5

ubuntu

почти 9 лет назад

CVE-2017-13704

CVSS3: 7.5

redhat

почти 9 лет назад

CVE-2017-13704

CVSS3: 7.5

debian

почти 9 лет назад

In dnsmasq before 2.78, if the DNS packet size does not match the expe ...

GHSA-mprq-hpvv-8wcc

CVSS3: 7.5

github

больше 4 лет назад

BDU:2022-07423

CVSS3: 7.5

fstec

почти 9 лет назад

Уязвимость функции memset() DNS-сервера Dnsmasq, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 99%

0.6541

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20