linux/meta-el-common.git/recipes-networking/dnsmasq, branch pyroCommmon distro layer for Enea Linuxhttps://git.enea.com/cgit/linux/meta-el-common.git/atom?h=pyro2017-10-04T13:28:01+00:00dnsmasq: CVE-2017-144952017-10-04T13:28:01+00:00Sona Sarmadisona.sarmadi@enea.com2017-10-04T10:34:30+00:00urn:sha1:cff1dc0bf1d330b828a93083228c40dd1bda4f4c
Lack of free() here.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-14495
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
dnsmasq: CVE-2017-144962017-10-04T13:28:01+00:00Sona Sarmadisona.sarmadi@enea.com2017-10-04T10:34:29+00:00urn:sha1:c65b24cdfd9edbc25796ba7db9a9ca68513324e9
Invalid boundary checks here. Integer underflow leading to a huge memcpy.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-14496
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
dnsmasq: CVE-2017-144942017-10-04T13:28:01+00:00Sona Sarmadisona.sarmadi@enea.com2017-10-04T10:34:28+00:00urn:sha1:91b02ae7ac707984cd5182bb39c2fe8086a1696f
Can help bypass ASLR.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-14494
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
dnsmasq: CVE-2017-144932017-10-04T13:28:01+00:00Sona Sarmadisona.sarmadi@enea.com2017-10-04T10:34:27+00:00urn:sha1:0c3826bac4ae83e563b4d050ffaf01e70ae8ad9b
Stack Based overflow.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-14493
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
dnsmasq: CVE-2017-144922017-10-04T13:28:01+00:00Sona Sarmadisona.sarmadi@enea.com2017-10-04T10:34:26+00:00urn:sha1:d5422e563facc33881763a587b37dd29012e160b
Heap based overflow.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-14492
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
dnsmasq: CVE-2017-144912017-10-04T13:28:01+00:00Sona Sarmadisona.sarmadi@enea.com2017-10-04T10:34:25+00:00urn:sha1:4a1d1cdf2bf53dedfdb25ae1a045dfbcfda77c85
Heap based overflow (2 bytes). Before 2.76 and this commit overflow
was unrestricted.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-14491
https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>