CVE-2017-15107 — Improperly Implemented Security Check for Standard in Dnsmasq
Severity
7.5HIGHNVD
EPSS
0.0%
top 92.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 23
Latest updateMay 13
Description
A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages4 packages
🔴Vulnerability Details
4GHSA▶
GHSA-f999-2m22-345j: A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2↗2022-05-13
OSV▶
CVE-2017-15107: A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2↗2018-01-23
CVEList▶
CVE-2017-15107: A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2↗2018-01-23