CVE-2023-49441

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-49441
dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html Exploit Mailing List
https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=65c2d6afd67a032f45f40d7e4d620f5d73e5f07d Broken Link
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html Exploit Mailing List
https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=65c2d6afd67a032f45f40d7e4d620f5d73e5f07d Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:thekelleys:dnsmasq:2.9:*:*:*:*:*:*:*
History

21 Nov 2024, 08:33

Type Values Removed Values Added
References () https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html - Exploit, Mailing List () https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html - Exploit, Mailing List
References () https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=65c2d6afd67a032f45f40d7e4d620f5d73e5f07d - Broken Link () https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=65c2d6afd67a032f45f40d7e4d620f5d73e5f07d - Broken Link

10 Oct 2024, 20:00

Type Values Removed Values Added
References () https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html - () https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html - Exploit, Mailing List
References () https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=65c2d6afd67a032f45f40d7e4d620f5d73e5f07d - () https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=65c2d6afd67a032f45f40d7e4d620f5d73e5f07d - Broken Link
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
First Time Thekelleys dnsmasq
Thekelleys
CPE cpe:2.3:a:thekelleys:dnsmasq:2.9:*:*:*:*:*:*:*
CWE CWE-190

07 Jun 2024, 14:56

Type Values Removed Values Added
Summary
  • (es) dnsmasq 2.9 es vulnerable al desbordamiento de enteros a través de forward_query.

06 Jun 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-06 22:15

Updated : 2024-11-21 08:33

NVD link : CVE-2023-49441

Mitre link : CVE-2023-49441

CVE.ORG link : CVE-2023-49441

JSON object : View

Products Affected

thekelleys

  • dnsmasq
CWE
CWE-190

Integer Overflow or Wraparound