CVE-2017-14491: Arista Eos

Critical severity, CVSS 9.8. EPSS: 84.9% chance of exploitation in the next 30 days.

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

Affected products

  • Arista Eos: up to and including 4.15; from 4.16, before 4.16.13m (fixed in 4.16.13m); from 4.17, before 4.17.8m (fixed in 4.17.8m); from 4.18, up to and including 4.18.4.2f
  • Arubanetworks Arubaos: from 6.3.1, before 6.3.1.25 (fixed in 6.3.1.25); from 6.4.4.0, before 6.4.4.16 (fixed in 6.4.4.16); from 6.5.0.0, before 6.5.1.9 (fixed in 6.5.1.9); from 6.5.3.0, before 6.5.3.3 (fixed in 6.5.3.3); from 6.5.4.0, before 6.5.4.2 (fixed in 6.5.4.2); from 8.1.0.0, before 8.1.0.4 (fixed in 8.1.0.4)
  • Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 17.04 only
  • Debian Debian Linux: version 7.0 only; version 7.1 only; version 8.0 only; version 9.0 only
  • Huawei Honor v9 Play Firmware: before jimmy-al00ac00b135 (fixed in jimmy-al00ac00b135)
  • NVIDIA Geforce Experience: from 3.0, before 3.10.0.55 (fixed in 3.10.0.55)
  • NVIDIA Linux For Tegra: before r21.6 (fixed in r21.6); before r24.2.2 (fixed in r24.2.2)
  • Opensuse Leap: version 42.2 only; version 42.3 only
  • Red Hat Enterprise Linux Desktop: version 6.0 only; version 7.0 only
  • Red Hat Enterprise Linux Server: version 6.0 only; version 7.0 only
  • Red Hat Enterprise Linux Workstation: version 6.0 only; version 7.0 only
  • Siemens Ruggedcom RM1224 Firmware: before 5.0 (fixed in 5.0)
  • Siemens Scalance M-800 Firmware: before 5.0 (fixed in 5.0)
  • Siemens Scalance s615 Firmware: before 5.0 (fixed in 5.0)
  • Siemens Scalance w1750d Firmware: before 6.5.1.5 (fixed in 6.5.1.5)
  • Suse Linux Enterprise Debuginfo: version 11 only
  • Suse Linux Enterprise Point Of Sale: version 11 only
  • Suse Linux Enterprise Server: version 11 only; version 12 only
  • Synology Diskstation Manager: version 5.2 only; version 6.0 only; version 6.1 only
  • Synology Router Manager: version 1.1 only
  • Thekelleys Dnsmasq: up to and including 2.77

Published 2017-10-04. Last modified 2026-06-17.