Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

SUSE: 2017:2616-1 Important: dnsmasq Heap Overflow and DoS Fixes

suse
Calendar Grey October 2, 2017
Dist Suse Esm H88
SUSE Security Update: Security update for dnsmasq Announcement ID: SUSE-SU-2017:2616-1 Rating: impor
An update that solves 8 vulnerabilities and has three fixes An update that solves 8 vulnerabilities and has three fixes An update that solves 8 vulnerabilities and has three fixes ...

Summary

This update for dnsmasq fixes the following issues. Remedy the following security issues: - CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354] - CVE-2017-14492: heap based overflow. [bsc#1060355] - CVE-2017-14493: stack based overflow. [bsc#1060360] - CVE-2017-14494: DHCP - info leak. [bsc#1060361] - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362] - CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364] - Prevent a man-in-the-middle attack (bsc#972164, fate#321175). Furthermore, the following issues have been fixed: - Fix DHCP relaying, broken in 2.76 and 2.77. - Update to version 2.78 (fate#321175, fate#322030, bsc#1035227). - Fix PXE booting for UEFI architectures (fate#322030). - Drop PrivateDevices=yes which breaks logging (bsc#902511, bsc#904537)

Topics%20covered

Topics Covered

security advisory information leak DoS important SUSE dnsmasq

References

#1035227 #1060354 #1060355 #1060360 #1060361

#1060362 #1060364 #902511 #904537 #908137

#972164

Cross- CVE-2015-3294 CVE-2015-8899 CVE-2017-14491

CVE-2017-14492 CVE-2017-14493 CVE-2017-14494

CVE-2017-14495 CVE-2017-14496

Affected Products:

SUSE Linux Enterprise Server 12-LTSS

https://www.suse.com/security/cve/CVE-2015-3294.html

https://www.suse.com/security/cve/CVE-2015-8899.html

https://www.suse.com/security/cve/CVE-2017-14491.html

https://www.suse.com/security/cve/CVE-2017-14492.html

https://www.suse.com/security/cve/CVE-2017-14493.html

https://www.suse.com/security/cve/CVE-2017-14494.html

https://www.suse.com/security/cve/CVE-2017-14495.html

https://www.suse.com/security/cve/CVE-2017-14496.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2616-1
Rating: important

Topics%20covered

Topics Covered

security advisory information leak DoS important SUSE dnsmasq

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here