Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-dnsmasq | Aug 22, 2024 | Oct 2, 2017 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-dnsmasqamazon-linux-ami-2-upgrade-dnsmasq-debuginfoamazon-linux-ami-2-upgrade-dnsmasq-utils | Apr 27, 2020 | Oct 3, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade-dnsmasq | Oct 3, 2017 | Oct 2, 2017 |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Oct 2, 2017 |
| Centos_linux | — | centos-upgrade-dnsmasqcentos-upgrade-dnsmasq-debuginfocentos-upgrade-dnsmasq-utils | Oct 3, 2017 | Oct 2, 2017 |
| Debian | debian-upgrade-dnsmasq | Oct 3, 2017 | Oct 2, 2017 | |
| Dnsmasq | dnsmasq-upgrade-latest | Oct 2, 2017 | Oct 2, 2017 | |
| Freebsd | freebsd-upgrade-package-dnsmasqfreebsd-upgrade-package-dnsmasq-devel | Oct 2, 2017 | Oct 2, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-dns-dnsmasq | Oct 30, 2017 | Oct 2, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-dnsmasqhuawei-euleros-2_0_sp2-upgrade-dnsmasq-utils | Sep 27, 2018 | Oct 2, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-service-network-dnsmasq-2-78-0-175-3-27-0-4-0 | Dec 19, 2017 | Oct 2, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-dnsmasqoracle-linux-upgrade-dnsmasq-utils | Oct 2, 2017 | Oct 2, 2017 |
| Redhat_linux | — | redhat-upgrade-dnsmasqredhat-upgrade-dnsmasq-debuginforedhat-upgrade-dnsmasq-utils | Oct 4, 2017 | Oct 2, 2017 |
| Suse | — | suse-upgrade-dnsmasq | Oct 2, 2017 | Oct 2, 2017 |
| Ubuntu | ubuntu-upgrade-dnsmasqubuntu-upgrade-dnsmasq-baseubuntu-upgrade-dnsmasq-utils | Oct 2, 2017 | Oct 2, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub