dnsmasq: information disclosure
| Package(s): | dnsmasq | CVE #(s): | CVE-2015-3294 | ||||||||||||||||||||||||||||
| Created: | May 5, 2015 | Updated: | December 18, 2015 | ||||||||||||||||||||||||||||
| Description: | From the CVE entry:
The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||