CVE:CVE-2017-14491
CNNVD:CNNVD-201709-747
Dnsmasq是软件开发者Simon Kelley所研发的一款使用C语言编写的开源轻量级DNS转发和DHCP、TFTP服务器。
Dnsmasq 2.78之前的版本中存在基于堆的缓冲区溢出漏洞。远程攻击者可借助特制的DNS响应利用该漏洞造成拒绝服务（崩溃）或执行任意代码。
solution:Upgrade thekelleys dnsmasq to a higher version than 2.77,and avoid the version (,2.77]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.04,and avoid the version 12.04,14.04,16.04,17.04; Upgrade debian debian_linux to a higher version than 7.0,7.1,8.0,9.0,and avoid the version 7.0,7.1,8.0,9.0; Upgrade opensuse leap to a higher version than 42.2,42.3,and avoid the version 42.2,42.3; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp3,11:sp4,and avoid the version 11:sp3,11:sp4; Upgrade suse linux_enterprise_point_of_sale to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,11:sp4,12,and avoid the version 11:sp3,11:sp4,12; Upgrade nvidia linux_for_tegra to a higher version than r21.6,r24.2.2,and avoid the version (,r21.6),(,r24.2.2); Upgrade nvidia geforce_experience to a higher version than 3.10.0.55,and avoid the version [3.0,3.10.0.55); Upgrade huawei honor_v9_play_firmware to a higher version than jimmy-al00ac00b135,and avoid the version (,jimmy-al00ac00b135); Upgrade arista eos to a higher version than 4.15,4.16.13m,4.17.8m,4.18.4.2f,and avoid the version (,4.15],[4.16,4.16.13m),[4.17,4.17.8m),[4.18,4.18.4.2f]; Upgrade siemens ruggedcom_rm1224_firmware to a higher version than 5.0,and avoid the version (,5.0); Upgrade siemens scalance_m-800_firmware to a higher version than 5.0,and avoid the version (,5.0); Upgrade siemens scalance_s615_firmware to a higher version than 5.0,and avoid the version (,5.0); Upgrade siemens scalance_w1750d_firmware to a higher version than 6.5.1.5,and avoid the version (,6.5.1.5); Upgrade arubanetworks arubaos to a higher version than 6.3.1.25,6.4.4.16,6.5.1.9,6.5.3.3,6.5.4.2,8.1.0.4,and avoid the version [6.3.1,6.3.1.25),[6.4.4.0,6.4.4.16),[6.5.0.0,6.5.1.9),[6.5.3.0,6.5.3.3),[6.5.4.0,6.5.4.2),[8.1.0.0,8.1.0.4); Upgrade synology diskstation_manager to a higher version than 5.2,6.0,6.1,and avoid the version 5.2,6.0,6.1; Upgrade synology router_manager to a higher version than 1.1,and avoid the version 1.1