Dnsmasq CVE-2015-3294 Remote Denial of Service Vulnerability

Bugtraq ID:	74452
Class:	Input Validation Error
CVE:	CVE-2015-3294
Remote:	Yes
Local:	No
Published:	May 04 2015 12:00AM
Updated:	Jan 11 2016 02:52AM
Credit:	Nick Sampanis
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Dnsmasq CVE-2015-3294 Remote Denial of Service Vulnerability

Dnsmasq is prone to a remote denial-of-service vulnerability.

An attacker can leverage this issue to cause denial-of-service condition.

Dnsmasq CVE-2015-3294 Remote Denial of Service Vulnerability

Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Dnsmasq CVE-2015-3294 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Dnsmasq CVE-2015-3294 Remote Denial of Service Vulnerability

References:

• [Dnsmasq-discuss] dnsmsaq potential vulnerability (Nick Sampanis)
  
• Dnsmasq Home Page (Dnsmasq)
  
• dnsmasq: unchecked return value of the setup_reply() function (Red Hat)