Vulnerabilities > Thekelleys > Dnsmasq > 2.61

DATE CVE VULNERABILITY TITLE RISK
2017-10-03 CVE-2017-13704 Improper Input Validation vulnerability in multiple products
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value.
7.5
2016-06-30 CVE-2015-8899 Improper Input Validation vulnerability in multiple products
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
network
low complexity
canonical thekelleys CWE-20
7.5