Vulnerability in dnsmasq - security update
Summary
DSA-3251-1: dnsmasq - security update. Affects dnsmasq versions < 2.62-3+deb7u2. Fixed in 2.62-3+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
dnsmasq is a small caching DNS proxy and DHCP/TFTP server. It is responsible for resolving domain names and providing network services such as DHCP and TFTP. This vulnerability affects the Debian packages of dnsmasq in the oldstable (wheezy) and stable (jessie) distributions.
Vulnerability Detail
The vulnerability in dnsmasq was discovered by Nick Sampanis. The issue arises from a failure to properly check the return value of the setup_reply() function during a TCP connection. This value is used as a size argument in a function that writes data on the client's connection. An attacker can exploit this flaw by sending a specially crafted DNS request, leading to a crash of dnsmasq or potential leakage of sensitive information from process memory.
How To Fix
Minimum fixed version
2.62-3+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade dnsmasqTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in dnsmasq can be fixed by upgrading to the recommended versions of the package. It is important to promptly apply the necessary updates to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for dnsmasq →
FAQ
dnsmasq is a small caching DNS proxy and DHCP/TFTP server used for resolving domain names and providing network services.
This vulnerability allows remote attackers to crash dnsmasq or potentially obtain sensitive information from process memory.
The oldstable (wheezy) and stable (jessie) distributions of Debian are affected.
This vulnerability was discovered by Nick Sampanis.
To fix this vulnerability, upgrade the dnsmasq packages to the recommended versions.
Related vulnerabilities
Recent vulnerabilities recorded for dnsmasq.
