Bug 1739422 (CVE-2019-14513)

Summary: CVE-2019-14513 dnsmasq: Improper bounds checking leads to a buffer overread
Product: [Other] Security Response Reporter: Marian Rehak <mrehak>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED NOTABUG QA Contact:
Severity: low Docs Contact:
Priority: low    
Version: unspecifiedCC: code, dbecker, dougsland, itamar, jima, jjoyce, jschluet, kbasil, laine, lhh, lpeer, mburns, p, pemensik, sclewis, slinaber, thozza, veillard
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: dnsmasq 2.76 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-08-12 14:47:43 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 1739423    

Description Marian Rehak 2019-08-09 09:50:20 UTC
Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491.

Upstream Issue:


Comment 2 Stefan Cornelius 2019-08-12 12:50:09 UTC
This commit fixes the problem for me:

Comment 5 Product Security DevOps Team 2019-08-12 14:47:43 UTC
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):


Comment 7 Summer Long 2019-08-12 22:40:23 UTC

This issue does not affect the versions of dnsmasq as shipped with Red Hat Enterprise Linux 5, 6, 7, and 8.

In Red Hat OpenStack Platform, which currently supports Red Hat Enterprise Linux 7.7, the dnsmasq package is pulled directly from the rhel-7-server-rpms channel. Red Hat OpenStack Platform is therefore unaffected, but please ensure that the underlying Red Hat Enterprise Linux dnsmasq package is current.