Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

dnsmasq can crash remotely, stopping DHCP service

CVE-2008-3350 · published 18 years ago
Summary

The dnsmasq program used on Debian systems can be forced to stop working if an attacker on the network sends specially crafted DHCP messages. This causes the service that provides DNS and DHCP to crash, interrupting network address assignments and name resolution. Apply the latest update for dnsmasq on Debian to fix the issue.

What to do
  • Update debian dnsmasq to version 2.44-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian dnsmasq < 2.44-1
Fix: upgrade to 2.44-1
Debian:13 debian dnsmasq < 2.44-1
Fix: upgrade to 2.44-1
Debian:14 debian dnsmasq < 2.44-1
Fix: upgrade to 2.44-1
– the_kelleys dnsmasq 2.43
cpe:2.3:a:the_kelleys:dnsmasq:2.43:*:*:*:*:*:*:*
Original advisory text
dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (2) attempting to renew a nonexistent DHCP lease for an i...
dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (2) attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214.
References
Severity
5.0 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published28 Jul 2008
Updated3 Nov 2026
First seen20 Sep 2026
Sources
DEBIAN-CVE-2008-3350 · OSV
CVE-2008-3350 · NVD
Track software like this
Free during beta