What’s Vulnerable › Vulnerabilities

CVE-2017-14491

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 86.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-04 · updated 2026-06-17
• Weakness: CWE-787

Description

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Affected products

• Arista Networks EOS: through 4.15; from 4.16 before 4.16.13m; from 4.17 before 4.17.8m; from 4.18 through 4.18.4.2f — fixed in 4.16.13m, 4.17.8m
• Hewlett Packard Enterprise (HPE) ArubaOS (AOS): from 6.3.1 before 6.3.1.25; from 6.4.4.0 before 6.4.4.16; from 6.5.0.0 before 6.5.1.9; from 6.5.3.0 before 6.5.3.3; from 6.5.4.0 before 6.5.4.2; from 8.1.0.0 before 8.1.0.4 — fixed in 6.3.1.25, 6.4.4.16, 6.5.1.9, 6.5.3.3, 6.5.4.2, 8.1.0.4
• Canonical Ubuntu Linux: 12.04, 14.04, 16.04, 17.04
• Debian Linux: 7.0, 7.1, 8.0, 9.0
• Huawei Technologies Co., Ltd. Honor V9 play: before jimmy-al00ac00b135 — fixed in jimmy-al00ac00b135
• Quadro, NVS, and GeForce (all versions): from 3.0 before 3.10.0.55 — fixed in 3.10.0.55
• NVIDIA Linux For Tegra: before r21.6; before r24.2.2 — fixed in r21.6, r24.2.2
• openSUSE Leap: 42.2, 42.3
• RedHat Enterprise Linux Desktop: 6.0, 7.0
• RedHat Enterprise Linux Server: 6.0, 7.0
• RedHat Enterprise Linux Workstation: 6.0, 7.0
• Siemens Ruggedcom Rm1224 Firmware: before 5.0 — fixed in 5.0
• Siemens Scalance M-800 Firmware: before 5.0 — fixed in 5.0
• Siemens Scalance S615 Firmware: before 5.0 — fixed in 5.0
• Siemens Scalance W1750D Firmware: before 6.5.1.5 — fixed in 6.5.1.5
• SUSE Linux Enterprise Debuginfo: 11-sp3, 11-sp4
• SUSE Linux Enterprise Point Of Sale: 11-sp3
• SUSE Linux Enterprise Server: 11-sp3, 11-sp4, 12
• Synology DiskStation Manager: 5.2, 6.0, 6.1
• Synology Router Manager (SRM): 1.1
• Simon Kelley dnsmasq: through 2.77

How to fix

Upgrade to a fixed version: Arista Networks EOS 4.16.13m, 4.17.8m; Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 6.3.1.25, 6.4.4.16, 6.5.1.9, 6.5.3.3; Huawei Technologies Co., Ltd. Honor V9 play jimmy-al00ac00b135; Quadro, NVS, and GeForce (all versions) 3.10.0.55; NVIDIA Linux For Tegra r21.6, r24.2.2; Siemens Ruggedcom Rm1224 Firmware 5.0; Siemens Scalance M-800 Firmware 5.0; Siemens Scalance S615 Firmware 5.0; Siemens Scalance W1750D Firmware 6.5.1.5. Check the vendor advisory for mitigations.

References

• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/4560
• http://nvidia.custhelp.com/app/answers/detail/a_id/4561
• http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html
• http://thekelleys.org.uk/dnsmasq/CHANGELOG
• http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
• http://www.debian.org/security/2017/dsa-3989
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en

Get alerted when CVE-2017-14491 or the next vulnerability affects your stack