CVE-2008-3350

dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (2) attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
the_kelleysdnsmasq
2.43
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
dnsmasq
bullseye
2.85-1
fixed
etch
not-affected
bookworm
2.89-1
fixed
sid
2.90-4
fixed
trixie
2.90-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dnsmasq
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
jaunty
not-affected
intrepid
not-affected
hardy
ignored
gutsy
ignored
feisty
ignored
dapper
ignored
References
http://article.gmane.org/gmane.network.dns.dnsmasq.general/2189
http://secunia.com/advisories/31197
http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
http://www.vupen.com/english/advisories/2008/2166
https://exchange.xforce.ibmcloud.com/vulnerabilities/43957
https://exchange.xforce.ibmcloud.com/vulnerabilities/43960
http://article.gmane.org/gmane.network.dns.dnsmasq.general/2189
http://secunia.com/advisories/31197
http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
http://www.vupen.com/english/advisories/2008/2166
https://exchange.xforce.ibmcloud.com/vulnerabilities/43957
https://exchange.xforce.ibmcloud.com/vulnerabilities/43960