This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-14513 →

DEBIAN-CVE-2019-14513

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation bey...

Original description

The description as published by the source.

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]

Debian:13 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]

Debian:14 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1"}]}]

References

advisory security-tracker.debian.org