Description
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Google Security Research · pythondosmultiple
https://www.exploit-db.com/exploits/42944
References (20)
Scores
CVSS v3
5.9
EPSS
0.1099
EPSS Percentile
93.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (12)
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
17.04
debian/debian_linux
7.0
debian/debian_linux
7.1
debian/debian_linux
9.0
novell/leap
42.2
novell/leap
42.3
redhat/enterprise_linux_desktop
7.0
redhat/enterprise_linux_server
7.0
... and 2 more
Published
Oct 03, 2017
Tracked Since
Feb 18, 2026