Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2008-3214

Publication date 18 July 2008

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Read the notes from the security team

Status

Package Ubuntu Release Status
dnsmasq 8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
7.04 feisty
Not affected
6.06 LTS dapper
Fixed 2.25-1ubuntu0.1

Notes

jdstrand

6.06 only. PoC exists and trivially exploitable openwall reference has reproducer

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
dnsmasq