fedoraredteam / elem

Enterprise Linux Exploit Mapper
GNU General Public License v3.0
28 stars 5 forks source link

dnsmasq POCs listed on Google Security blog post #63

Open jason-callaway opened 7 years ago

jason-callaway commented 7 years ago

https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+GoogleOnlineSecurityBlog+(Google+Online+Security+Blog)

Suggesting these as manual additions, not automated.

From the article:

CVE
Impact
Vector
Notes
PoC
CVE-2017-14491
RCE
DNS
Heap based overflow (2 bytes). Before 2.76 and this commit overflow was unrestricted.
CVE-2017-14492
RCE
DHCP
Heap based overflow.
CVE-2017-14493
RCE
DHCP
Stack Based overflow.
CVE-2017-14494
Information Leak
DHCP
Can help bypass ASLR.
CVE-2017-14495
OOM/DoS
DNS
Lack of free() here.
CVE-2017-14496
DoS
DNS
Invalid boundary checks here. Integer underflow leading to a huge memcpy.
CVE-2017-13704
DoS
DNS
Bug collision with CVE-2017-13704