Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2019-14513 →

DEBIAN-CVE-2019-14513

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation bey...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]

Debian:13 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]

Debian:14 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]

Références

advisory security-tracker.debian.org