In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade dnsmasq | Aug 22, 2024 | Oct 2, 2017 |
| Debian | — | Upgrade dnsmasq | Jul 30, 2024 | Oct 3, 2017 |
| Dnsmasq | — | Upgrade DNSMasq to the latest version | Oct 2, 2017 | Oct 2, 2017 |
| Freebsd | — | Upgrade dnsmasq-develUpgrade dnsmasq | Oct 2, 2017 | Oct 2, 2017 |
| Oracle Solaris | — | Upgrade service/network/dnsmasq to version 2.78-0.175.3.27.0.4.0 on Solaris 11.3 | Dec 19, 2017 | Oct 2, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 2, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub