• Simon Kelley's avatar
    Security fix, CVE-2017-14495, OOM in DNS response creation. · 51eadb69
    Simon Kelley authored
    Fix out-of-memory Dos vulnerability. An attacker which can
    send malicious DNS queries to dnsmasq can trigger memory
    allocations in the add_pseudoheader function
    The allocated memory is never freed which leads to a DoS
    through memory exhaustion. dnsmasq is vulnerable only
    if one of the following option is specified:
    --add-mac, --add-cpe-id or --add-subnet.
    51eadb69
CHANGELOG 85.5 KB