SUSE-SU-2017:2619-1: dnsmasq&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:2619-1 is a vulnerability in dnsmasq&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 8 · Downstream 0 · Related 8Timeline
- 02-10-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for dnsmasq This update for dnsmasq fixes the following security issues: - CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354] - CVE-2017-14492: heap based overflow. [bsc#1060355] - CVE-2017-14493: stack based overflow. [bsc#1060360] - CVE-2017-14494: DHCP - info leak. [bsc#1060361] - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362] - CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364] This update brings a (small) potential incompatibility in the handling of 'basename' in --pxe-service. Please read the CHANGELOG and the documentation if you are using this option.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- dnsmasq&distro=SUSE Linux Enterprise Server 11 SP4< 2.78-0.17.5.1
- dnsmasq&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 2.78-0.17.5.1
1 vendor · 2 products