CVE-2017-14491

• A-158221622
• ASB-A-158221622

• SUSE-SU-2017:2616-1
• SUSE-SU-2017:2617-1
• SUSE-SU-2017:2618-1
• SUSE-SU-2017:2619-1
• openSUSE-SU-2024:10721-1

• 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "3.0"
                },
                {
                    "fixed": "3.10.0.55"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "11-sp3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "11-sp4"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "11-sp3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:synology:router_manager:1.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "4.15"
                },
                {
                    "introduced": "4.16"
                },
                {
                    "fixed": "4.16.13m"
                },
                {
                    "introduced": "4.17"
                },
                {
                    "fixed": "4.17.8m"
                },
                {
                    "introduced": "4.18"
                },
                {
                    "last_affected": "4.18.4.2f"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "introduced": "6.3.1"
                },
                {
                    "fixed": "6.3.1.25"
                },
                {
                    "introduced": "6.4.4.0"
                },
                {
                    "fixed": "6.4.4.16"
                },
                {
                    "introduced": "6.5.0.0"
                },
                {
                    "fixed": "6.5.1.9"
                },
                {
                    "introduced": "6.5.3.0"
                },
                {
                    "fixed": "6.5.3.3"
                },
                {
                    "introduced": "6.5.4.0"
                },
                {
                    "fixed": "6.5.4.2"
                },
                {
                    "introduced": "8.1.0.0"
                },
                {
                    "fixed": "8.1.0.4"
                }
            ],
            "cpe": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "12.04"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "12.04"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.04"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "16.04"
                }
            ],
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "17.04"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.1"
                }
            ],
            "cpe": "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "8.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "9.0"
                }
            ],
            "cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:huawei:honor_v9_play_firmware:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "fixed": "jimmy-al00ac00b135"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "fixed": "r21.6"
                },
                {
                    "fixed": "r24.2.2"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "42.2"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "42.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "fixed": "5.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "fixed": "5.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "fixed": "5.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "fixed": "6.5.1.5"
                }
            ],
            "cpe": "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "11-sp3"
                }
            ],
            "cpe": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "11-sp4"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "12"
                }
            ],
            "cpe": "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:synology:diskstation_manager:5.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "5.2"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:synology:diskstation_manager:6.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:synology:diskstation_manager:6.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.1"
                }
            ]
        }
    ]
}

• http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc
• http://www.securityfocus.com/bid/101085
• http://www.securityfocus.com/bid/101977
• http://www.securitytracker.com/id/1039474
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV/
• https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html
• https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/4560
• http://nvidia.custhelp.com/app/answers/detail/a_id/4561
• http://thekelleys.org.uk/dnsmasq/CHANGELOG
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt
• http://www.debian.org/security/2017/dsa-3989
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en
• http://www.ubuntu.com/usn/USN-3430-1
• http://www.ubuntu.com/usn/USN-3430-2
• http://www.ubuntu.com/usn/USN-3430-3
• https://access.redhat.com/errata/RHSA-2017:2836
• https://access.redhat.com/errata/RHSA-2017:2837
• https://access.redhat.com/errata/RHSA-2017:2838
• https://access.redhat.com/errata/RHSA-2017:2839
• https://access.redhat.com/errata/RHSA-2017:2840
• https://access.redhat.com/errata/RHSA-2017:2841
• https://access.redhat.com/security/vulnerabilities/3199382
• https://security.gentoo.org/glsa/201710-27
• https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html
• https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/
• https://www.debian.org/security/2017/dsa-3989
• https://www.kb.cert.org/vuls/id/973527
• https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq
• https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf
• http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html
• https://www.exploit-db.com/exploits/42941/