suse · CVE-2017-14495

Quick triage

Priority: high Published: 2021-05-30 14:02:11 UTC Updated: 2026-04-17 15:54:50 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-14495 severity important: SUSE including 26 source package names (2.78:dnsmasq-2.78-18.3.1, dnsmasq, …), 54 product×package rows across 50 product lines (Container caasp/v4/dnsmasq-nanny, SUSE Liberty Linux 7, … (50 product lines)): Fixed 49, Known Not Affected 5.

Description:

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.

cvelogic Threat Intelligence