RETIRED: Dnsmasq CVE-2015-1859 Information Disclosure Vulnerability

Bugtraq ID:	74310
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 22 2015 12:00AM
Updated:	Sep 02 2016 07:00PM
Credit:	Nick Sampanis
Vulnerable:	Ubuntu Ubuntu Linux 15.04 Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Thekelleys Dnsmasq 2.72
Not Vulnerable:

RETIRED: Dnsmasq CVE-2015-1859 Information Disclosure Vulnerability

Dnsmasq is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to access sensitive information. Information obtained may lead to further attacks.

NOTE: This BID is being retired as it is a duplicate of BID 74307 (Qt 'qicohandler.cpp' Memory Corruption Vulnerability).

RETIRED: Dnsmasq CVE-2015-1859 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Dnsmasq CVE-2015-1859 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Dnsmasq CVE-2015-1859 Information Disclosure Vulnerability

References:

• [Dnsmasq-discuss] dnsmsaq potential vulnerability (Nick Sampanis)
  
• Dnsmasq Home Page (Dnsmasq)
  
• Obrela Security Industries Advisory (OSI-1502) (Nick Sampanis)