Skip to content
Noroxi

thekelleys records

39 published records for vendor thekelleys.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
82.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

39 records
  • CVE-2017-14492
    67This week

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via

    CriticalCVSS 9.8Proof of conceptEPSS 94%

    canonical · ubuntu linuxOct 2, 2017

  • CVE-2017-14491
    65This week

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via

    CriticalCVSS 9.8Proof of conceptEPSS 86%

    thekelleys · dnsmasqOct 3, 2017

  • CVE-2017-14493
    65This week

    Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code vi

    CriticalCVSS 9.8Proof of conceptEPSS 85%

    canonical · ubuntu linuxOct 2, 2017

  • CVE-2023-50387
    60This week

    Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of ser

    HighCVSS 7.5Proof of conceptEPSS 99%

    redhat · enterprise linuxFeb 14, 2024

  • CVE-2020-25681
    57Plan

    A flaw was found in dnsmasq before version 2.83.

    HighCVSS 8.1No exploitEPSS 84%

    thekelleys · dnsmasqJan 20, 2021

  • CVE-2017-14495
    56Plan

    Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a

    HighCVSS 7.5Proof of conceptEPSS 85%

    canonical · ubuntu linuxOct 2, 2017

  • CVE-2020-25682
    55Plan

    A flaw was found in dnsmasq before 2.83.

    HighCVSS 8.1No exploitEPSS 75%

    thekelleys · dnsmasqJan 20, 2021

  • CVE-2017-14496
    51Plan

    Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is speci

    HighCVSS 7.5Proof of conceptEPSS 68%

    canonical · ubuntu linuxOct 2, 2017

  • CVE-2020-25687
    50Plan

    A flaw was found in dnsmasq before version 2.83.

    MediumCVSS 5.9No exploitEPSS 89%

    thekelleys · dnsmasqJan 20, 2021

  • CVE-2020-25683
    50Plan

    A flaw was found in dnsmasq before version 2.83.

    MediumCVSS 5.9No exploitEPSS 88%

    thekelleys · dnsmasqJan 20, 2021

  • CVE-2017-13704
    50Plan

    In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value.

    HighCVSS 7.5No exploitEPSS 65%

    canonical · ubuntu linuxOct 2, 2017

  • CVE-2017-14494
    44Plan

    dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handli

    MediumCVSS 5.9Proof of conceptEPSS 70%

    canonical · ubuntu linuxOct 2, 2017

  • CVE-2021-45953
    40Plan

    Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c).

    CriticalCVSS 9.8No exploitEPSS 2%

    thekelleys · dnsmasqDec 31, 2021

  • CVE-2021-45956
    40Plan

    Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply).

    CriticalCVSS 9.8No exploitEPSS 2%

    thekelleys · dnsmasqDec 31, 2021

  • CVE-2021-45954
    40Plan

    Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth).

    CriticalCVSS 9.8No exploitEPSS 2%

    thekelleys · dnsmasqDec 31, 2021

  • CVE-2021-45951
    40Plan

    Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard).

    CriticalCVSS 9.8No exploitEPSS 2%

    thekelleys · dnsmasqDec 31, 2021

  • CVE-2021-45952
    40Plan

    Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp).

    CriticalCVSS 9.8No exploitEPSS 2%

    thekelleys · dnsmasqDec 31, 2021

  • CVE-2021-45955
    40Plan

    Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a pr

    CriticalCVSS 9.8No exploitEPSS 2%

    thekelleys · dnsmasqDec 31, 2021

  • CVE-2021-45957
    40Plan

    Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c).

    CriticalCVSS 9.8No exploitEPSS 2%

    thekelleys · dnsmasqDec 31, 2021

  • CVE-2009-2957
    32Monitor

    Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote att

    MediumCVSS 6.8Proof of conceptEPSS 15%

    thekelleys · dnsmasqSep 2, 2009

  • CVE-2008-3214
    32Monitor

    dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPRE

    HighCVSS 7.8No exploitEPSS 2%

    thekelleys · dnsmasqJul 18, 2008

  • CVE-2017-15107
    31Monitor

    A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78.

    HighCVSS 7.5No exploitEPSS 2%

    thekelleys · dnsmasqJan 23, 2018

  • CVE-2022-0934
    31Monitor

    A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq.

    HighCVSS 7.5No exploitEPSS 2%

    thekelleys · dnsmasqAug 29, 2022

  • CVE-2015-8899
    31Monitor

    Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2

    HighCVSS 7.5No exploitEPSS 2%

    canonical · ubuntu linuxJun 30, 2016

  • CVE-2005-0877
    31Monitor

    Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.

    HighCVSS 7.5No exploitEPSS 1%

    thekelleys · dnsmasqMay 2, 2005