Description
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Google Security Research · pythondosmultiple
https://www.exploit-db.com/exploits/42945
References (21)
... and 1 more
Scores
CVSS v3
7.5
EPSS
0.5332
EPSS Percentile
98.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-772
Status
published
Products (10)
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
17.04
debian/debian_linux
7.0
debian/debian_linux
7.1
debian/debian_linux
9.0
redhat/enterprise_linux_desktop
7.0
redhat/enterprise_linux_server
7.0
redhat/enterprise_linux_workstation
7.0
thekelleys/dnsmasq
< 2.77
Published
Oct 03, 2017
Tracked Since
Feb 18, 2026