> Source: [sk120761](https://support.checkpoint.com/results/sk/sk120761)

# sk120761 - Check Point response to 'dnsmasq' vulnerabilities (CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496, CVE-2017-13704)

| Property | Value |
|----------|-------|
| Solution ID | sk120761 |
| Date Created | 2017-10-04 |
| Last Modified | 2021-10-20 |
| Technical Level | General |
| OS | Gaia |

## Symptoms

- A series of vulnerabilities was reported in '`dnsmasq`' utility lower than version 2.78   
(CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496, CVE-2017-13704).

## Solution

The "dnsmasq" RPM is installed on Check Point OS, and its configuration is hardcoded with values taken from interactive installation.  
These values cannot be altered by the attacker, and hence dnsmasq exploit is *not* possible.

Therefore Gaia OS / SecurePlatform OS / Gaia Embedded are not vulnerable to these vulnerabilities.

**Notes:**

* Check Point has released an IPS Protection [**Dnsmasq Heap Based Overflow Remote Code Execution (CVE-2017-14491)**](https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0821.html).
* Check Point has released an IPS Protection [**Dnsmasq Lack of Free Denial of Service (CVE-2017-14495)**](https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0823.html).
* Check Point has released an IPS Protection [**Dnsmasq Integer Underflow Denial Of Service (CVE-2017-14496)**](https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0822.html).

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content