CVE-2017-14491 Memory corruption in n/a

Critical 9.8 Published 2 Oct 2017 Updated 5 Aug 2024

Remote attackers can execute arbitrary code or cause a denial of service via a crafted DNS response in dnsmasq.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2017-14491?

CVE-2017-14491 is a critical memory corruption vulnerability in Arubanetworks Arubaos, published on 2 Oct 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Weakness: CWE-787

Which versions are affected by CVE-2017-14491?

It affects 21 products.

Linux distribution packages (39)

`dnsmasq` Red Hat:enterprise_linux:6::client	All versions	`0:2.48-18.el6_9`
`dnsmasq-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:2.48-18.el6_9`
`dnsmasq-utils` Red Hat:enterprise_linux:6::client	All versions	`0:2.48-18.el6_9`
`dnsmasq` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.48-18.el6_9`
`dnsmasq-debuginfo` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.48-18.el6_9`
`dnsmasq-utils` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.48-18.el6_9`
`dnsmasq` Red Hat:enterprise_linux:6::server	All versions	`0:2.48-18.el6_9`
`dnsmasq-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:2.48-18.el6_9`
`dnsmasq-utils` Red Hat:enterprise_linux:6::server	All versions	`0:2.48-18.el6_9`
`dnsmasq` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.48-18.el6_9`
`dnsmasq-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.48-18.el6_9`
`dnsmasq-utils` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.48-18.el6_9`
`dnsmasq` Red Hat:rhel_aus:5.9	All versions	`0:2.45-2.el5_9.1`
`dnsmasq-debuginfo` Red Hat:rhel_aus:5.9	All versions	`0:2.45-2.el5_9.1`
`dnsmasq` Red Hat:rhel_aus:6.4::server	All versions	`0:2.48-13.el6_4.1`
`dnsmasq-debuginfo` Red Hat:rhel_aus:6.4::server	All versions	`0:2.48-13.el6_4.1`
`dnsmasq-utils` Red Hat:rhel_aus:6.4::server	All versions	`0:2.48-13.el6_4.1`
`dnsmasq` Red Hat:rhel_aus:6.5::server	All versions	`0:2.48-13.el6_5.1`
`dnsmasq-debuginfo` Red Hat:rhel_aus:6.5::server	All versions	`0:2.48-13.el6_5.1`
`dnsmasq-utils` Red Hat:rhel_aus:6.5::server	All versions	`0:2.48-13.el6_5.1`
`dnsmasq` Red Hat:rhel_aus:6.6::server	All versions	`0:2.48-14.el6_6.1`
`dnsmasq-debuginfo` Red Hat:rhel_aus:6.6::server	All versions	`0:2.48-14.el6_6.1`
`dnsmasq-utils` Red Hat:rhel_aus:6.6::server	All versions	`0:2.48-14.el6_6.1`
`dnsmasq` Red Hat:rhel_els:5	All versions	`0:2.45-2.el5_11.1`
`dnsmasq-debuginfo` Red Hat:rhel_els:5	All versions	`0:2.45-2.el5_11.1`
`dnsmasq` Red Hat:rhel_eus:6.7::computenode	All versions	`0:2.48-16.el6_7.1`
`dnsmasq-debuginfo` Red Hat:rhel_eus:6.7::computenode	All versions	`0:2.48-16.el6_7.1`
`dnsmasq-utils` Red Hat:rhel_eus:6.7::computenode	All versions	`0:2.48-16.el6_7.1`
`dnsmasq` Red Hat:rhel_eus:6.7::server	All versions	`0:2.48-16.el6_7.1`
`dnsmasq-debuginfo` Red Hat:rhel_eus:6.7::server	All versions	`0:2.48-16.el6_7.1`
`dnsmasq-utils` Red Hat:rhel_eus:6.7::server	All versions	`0:2.48-16.el6_7.1`
`dnsmasq` Red Hat:rhel_mission_critical:6.2::server	All versions	`0:2.48-5.el6_2.2`
`dnsmasq-debuginfo` Red Hat:rhel_mission_critical:6.2::server	All versions	`0:2.48-5.el6_2.2`
`dnsmasq` Red Hat:rhel_tus:6.5::server	All versions	`0:2.48-13.el6_5.1`
`dnsmasq-debuginfo` Red Hat:rhel_tus:6.5::server	All versions	`0:2.48-13.el6_5.1`
`dnsmasq-utils` Red Hat:rhel_tus:6.5::server	All versions	`0:2.48-13.el6_5.1`
`dnsmasq` Red Hat:rhel_tus:6.6::server	All versions	`0:2.48-14.el6_6.1`
`dnsmasq-debuginfo` Red Hat:rhel_tus:6.6::server	All versions	`0:2.48-14.el6_6.1`
`dnsmasq-utils` Red Hat:rhel_tus:6.6::server	All versions	`0:2.48-14.el6_6.1`

Products include Arista Eos, Arubanetworks Arubaos, Canonical Ubuntu Linux, Debian Debian Linux, Huawei Honor V9 Play Firmware, Nvidia Geforce Experience and 15 more.

How do I fix CVE-2017-14491?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2017-14491 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-14491 exists.

Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.

All Arubanetworks Arubaos vulnerabilities

Sources

Also known as A-158221622, ALPINE-CVE-2017-14491, ASB-A-158221622, CLEANSTART-2026-TE12187, DEBIAN-CVE-2017-14491, GHSA-m4px-ph3f-7964 and 5 more.