CVE-2017-15107

EUVD-2017-6572
A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
Affected Products (NVD)
VendorProductVersion
thekelleysdnsmasq
𝑥
≤ 2.78
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
dnsmasq
bookworm
2.89-1
fixed
bullseye
2.85-1
fixed
jessie
no-dsa
sid
2.90-4
fixed
stretch
no-dsa
trixie
2.90-4
fixed
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dnsmasq
artful
ignored
bionic
not-affected
cosmic
not-affected
disco
not-affected
eoan
not-affected
focal
not-affected
groovy
not-affected
trusty
not-affected
xenial
Fixed 2.75-1ubuntu0.16.04.10
released
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html
http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2018q1/011896.html
http://www.securityfocus.com/bid/102812
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html
http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2018q1/011896.html
http://www.securityfocus.com/bid/102812