CVE-2017-14495 is a memory leak vulnerability in dnsmasq versions prior to 2.78, specifically when certain options like --add-mac are enabled, affecting various products including Canonical, Debian, and Red Hat. This high-severity flaw (CVSS 7.5) allows remote, unauthenticated attackers to cause a denial of service through memory exhaustion with low attack complexity. While not listed in CISA's KEV catalog, public exploit code exists (EDB-42945), and the vulnerability has garnered significant community discussion and media coverage, indicating widespread awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
14.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | ||
16.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | ||
17.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | ||
7.1CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.