CVE-2017-14495

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service…

published October 2, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS

—

EPSS

86%

Percentile

99.7

In the wild

Unconfirmed

What it is

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.85907 · 99.7th percentile
Published: 2017-10-02T21:00Z

EPSS history

Timeline

02 OCT 21:00Z
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service…
cvelistv5