CVE-2008-3214

{"id": "CVE-2008-3214", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-07-18T16:41:00.000", "references": [{"url": "http://freshmeat.net/projects/dnsmasq/?branch_id=1991&release_id=217681", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/06/30/7", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/07/01/8", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/07/02/4", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/07/03/4", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/07/08/8", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/07/12/3", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG", "source": "cve@mitre.org"}, {"url": "https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/47438", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43929", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon."}, {"lang": "es", "value": "dnsmasq versi\u00f3n 2.25, permite a los atacantes remotos causar una denegaci\u00f3n de servicio (bloqueo del demonio) al (1) renovar una concesi\u00f3n inexistente o (2) enviar un DHCPREQUEST para una direcci\u00f3n IP que no est\u00e1 en la misma red, relacionada con la respuesta NAK DHCP del demonio."}], "lastModified": "2017-08-08T01:31:40.840", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:thekelleys:dnsmasq:2.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4ADECE43-F034-43E5-AA84-3EB336877DEC"}], "operator": "OR"}]}], "vendorComments": [{"comment": "Not vulnerable. This issue did not affect the version of dnsmasq as shipped with Red Hat Enterprise Linux 5.", "lastModified": "2008-07-25T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "cve@mitre.org"}