Oval Definition:oval:com.ubuntu.precise:def:20153294000
Revision Date:2015-05-08Version:1
Title:CVE-2015-3294 on Ubuntu 12.04 LTS (precise) - medium.
Description:The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-3294
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'dnsmasq' package in precise was vulnerable but has been fixed (note: '2.59-4ubuntu0.2').
  • BACK