Alerts This Week
Warning Icon 1 609
Alerts This Week
Warning Icon 1 609

SUSE: 2017:2617-1 Important: dnsmasq Heap Overflow and DoS

suse
Calendar Grey October 2, 2017
Dist Suse Esm H88
A significant patch from SUSE resolves various dnsmasq problems, delivering essential security vulnerability fixes. Ensure your defenses are strong!
An update that fixes 8 vulnerabilities is now available

Summary

This update for dnsmasq fixes the following security issues: - CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354] - CVE-2017-14492: heap based overflow. [bsc#1060355] - CVE-2017-14493: stack based overflow. [bsc#1060360] - CVE-2017-14494: DHCP - info leak. [bsc#1060361] - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362] - CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364] This update brings a (small) potential incompatibility in the handling of "basename" in --pxe-service. Please read the CHANGELOG and the documentation if you are using this option. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-dnsmasq-13296=1

Topics%20covered

Topics Covered

security advisory heap overflow Denial of Service SUSE dnsmasq

References

#1060354 #1060355 #1060360 #1060361 #1060362

#1060364

Cross- CVE-2015-3294 CVE-2015-8899 CVE-2017-14491

CVE-2017-14492 CVE-2017-14493 CVE-2017-14494

CVE-2017-14495 CVE-2017-14496

Affected Products:

SUSE Linux Enterprise Server 11-SP3-LTSS

SUSE Linux Enterprise Point of Sale 11-SP3

SUSE Linux Enterprise Debuginfo 11-SP3

https://www.suse.com/security/cve/CVE-2015-3294.html

https://www.suse.com/security/cve/CVE-2015-8899.html

https://www.suse.com/security/cve/CVE-2017-14491.html

https://www.suse.com/security/cve/CVE-2017-14492.html

https://www.suse.com/security/cve/CVE-2017-14493.html

https://www.suse.com/security/cve/CVE-2017-14494.html

https://www.suse.com/security/cve/CVE-2017-14495.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2617-1
Rating: important

Topics%20covered

Topics Covered

security advisory heap overflow Denial of Service SUSE dnsmasq

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here