| commit | 51eadb692a5123b9838e5a68ecace3ac579a3a45 | [log] [tgz] |
|---|---|---|
| author | Simon Kelley <simon@thekelleys.org.uk> | Mon Sep 25 20:16:50 2017 +0100 |
| committer | Simon Kelley <simon@thekelleys.org.uk> | Mon Sep 25 20:16:50 2017 +0100 |
| tree | 2e3b98b3753245163d12055de2b9212703c62cd4 | |
| parent | 897c113fda0886a28a986cc6ba17bb93bd6cb1c7 [diff] |
Security fix, CVE-2017-14495, OOM in DNS response creation. Fix out-of-memory Dos vulnerability. An attacker which can send malicious DNS queries to dnsmasq can trigger memory allocations in the add_pseudoheader function The allocated memory is never freed which leads to a DoS through memory exhaustion. dnsmasq is vulnerable only if one of the following option is specified: --add-mac, --add-cpe-id or --add-subnet.