CVE-2008-3214: thekelleys dnsmasq Improper Input Validation
Vulnerability summary
CVE-2008-3214 is a high (CVSS 7.8) Improper Input Validation vulnerability in thekelleys dnsmasq. EPSS estimates a 2.53% chance of exploitation in the next 30 days, higher than 84.6% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 18-07-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.53%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.53% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (bugs.launchpad.net)
Maturity: unknown
Exploit Reference (openwall.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian1 product
- dnsmasq< 2.26-1
Thekelleys1 product
- dnsmasq2.25
2 vendors · 2 products
References
11 links- freshmeat.net/projects/dnsmasq/?branch_id=1991&release_id=217681X Refsource CONFIRM
- www.thekelleys.org.uk/dnsmasq/CHANGELOGX Refsource CONFIRM
