Vulnerabilities > Thekelleys > High

DATE CVE VULNERABILITY TITLE RISK
2016-06-30 CVE-2015-8899 Improper Input Validation vulnerability in multiple products
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
network
low complexity
canonical thekelleys CWE-20
7.5
2008-07-18 CVE-2008-3214 Improper Input Validation vulnerability in Thekelleys Dnsmasq 2.25
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
network
low complexity
thekelleys CWE-20
7.8
2005-05-02 CVE-2005-0877 Origin Validation Error vulnerability in Thekelleys Dnsmasq
Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.
network
low complexity
thekelleys CWE-346
7.5