Name: CVE-2019-14834: Allocation of Resources Without Limits or Throttling
Creator: Rapid7
Published: 2020-01-07T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-14834, CWE-770, CVSS 3.7, EPSS 0.00042

A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.

CVSS Details

CVSS 3.1 Base Score: 3.7
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade dnsmasq	Jan 7, 2020	Jan 7, 2020
Amazon Linux Ami 2	—	Upgrade dnsmasqUpgrade dnsmasq-utilsUpgrade dnsmasq-debuginfo	Oct 28, 2020	Jan 7, 2020
Amazon_linux	—	Upgrade dnsmasq	Mar 23, 2023	Dec 5, 2019
Centos_linux	—	Upgrade dnsmasq-utilsUpgrade dnsmasq-utils-debuginfoUpgrade dnsmasqUpgrade dnsmasq-debugsourceUpgrade dnsmasq-debuginfo	Apr 29, 2020	Jan 7, 2020
Debian	—	Upgrade dnsmasq	Jul 30, 2024	Jan 7, 2020
Huawei Euleros 2_0_sp2	—	Upgrade dnsmasqUpgrade dnsmasq-utils	Jun 17, 2020	Jan 7, 2020
Huawei Euleros 2_0_sp3	—	Upgrade dnsmasqUpgrade dnsmasq-utils	Apr 16, 2020	Jan 7, 2020
Huawei Euleros 2_0_sp5	—	Upgrade dnsmasqUpgrade dnsmasq-utils	Feb 24, 2020	Jan 7, 2020
Oracle Solaris	—	Upgrade service/network/dnsmasq to version 2.81-11.4.24.0.1.75.1 on Solaris 11.4	Jan 19, 2021	Jan 7, 2020
Oracle_linux	—	Upgrade dnsmasq-utilsUpgrade dnsmasq	Oct 7, 2020	Oct 23, 2019
Redhat Openshift	—	Upgrade redhat-coreos	Dec 29, 2020	Jan 7, 2020
Redhat_linux	—	Upgrade dnsmasq-debugsourceUpgrade dnsmasqUpgrade dnsmasq-debuginfoUpgrade dnsmasq-utilsUpgrade dnsmasq-utils-debuginfo	Apr 29, 2020	Jan 7, 2020
Suse	—	Upgrade dnsmasq-utilsUpgrade dnsmasq	Dec 12, 2019	Dec 5, 2019
Ubuntu	—	Upgrade dnsmasq-utilsUpgrade dnsmasq-utils (Ubuntu Pro)Upgrade dnsmasq (Ubuntu Pro)Upgrade dnsmasq-base (Ubuntu Pro)Upgrade dnsmasq-baseUpgrade dnsmasq	Jan 20, 2021	Dec 5, 2019
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Jan 7, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence