CVE-2008-3214 — Improper Input Validation in Dnsmasq

CWE-20 — Improper Input Validation7 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 52.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Thekelleys Dnsmasq
Timeline
PublishedJul 18
Latest updateMay 1

Description

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶Debianthekelleys/dnsmasq< 2.26-1+3

🔴Vulnerability Details

3
GHSA
GHSA-q354-p7j8-f3fx: dnsmasq 2↗2022-05-01
▶
OSV
CVE-2008-3214: dnsmasq 2↗2008-07-18
▶
CVEList
CVE-2008-3214: dnsmasq 2↗2008-07-18
▶

📋Vendor Advisories

3
Debian
CVE-2008-3214: dnsmasq - dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash)...↗2008
▶
Red Hat
CVE-2008-3214: dnsmasq 2↗
▶
Red Hat
CVE-2008-3350: dnsmasq 2↗
▶
CVE-2008-3214 — Improper Input Validation in Dnsmasq | cvebase