Lucene search
AlmaLinuxALSA-2024:1334HistoryMar 14, 2024 - 12:00 a.m.
Important: dnsmasq security update
2024-03-1400:00:00
errata.almalinux.org
14
dnsmasq
security update
dns forwarder
dhcp server
cpu consumption
dnssec
cve
references
vulnerabilities
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.
Security Fix(es):
- dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC
validator (CVE-2023-50387) - dnsmasq: bind9: Preparing an NSEC3 closest encloser proof can
exhaust CPU resources (CVE-2023-50868)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | x86_64 | dnsmasq | < 2.85-14.el9_3.1 | dnsmasq-2.85-14.el9_3.1.x86_64.rpm |
| almalinux | 9 | x86_64 | dnsmasq-utils | < 2.85-14.el9_3.1 | dnsmasq-utils-2.85-14.el9_3.1.x86_64.rpm |
| almalinux | 9 | ppc64le | dnsmasq | < 2.85-14.el9_3.1 | dnsmasq-2.85-14.el9_3.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | dnsmasq-utils | < 2.85-14.el9_3.1 | dnsmasq-utils-2.85-14.el9_3.1.ppc64le.rpm |
| almalinux | 9 | aarch64 | dnsmasq | < 2.85-14.el9_3.1 | dnsmasq-2.85-14.el9_3.1.aarch64.rpm |
| almalinux | 9 | aarch64 | dnsmasq-utils | < 2.85-14.el9_3.1 | dnsmasq-utils-2.85-14.el9_3.1.aarch64.rpm |
| almalinux | 9 | s390x | dnsmasq | < 2.85-14.el9_3.1 | dnsmasq-2.85-14.el9_3.1.s390x.rpm |
| almalinux | 9 | s390x | dnsmasq-utils | < 2.85-14.el9_3.1 | dnsmasq-utils-2.85-14.el9_3.1.s390x.rpm |
Related
freebsd
freebsd
powerdns-recursor -- Multiple Vulnerabilities
2024-02-14 00:00:00
nessus
nessus
FreeBSD : DNSSEC validators -- denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilities (21a854cc-cac1-11ee-b7a7-353f1e043d9a)
2024-02-15 00:00:00
RHEL 9 : unbound (RHSA-2024:0977)
2024-02-26 00:00:00
RHEL 8 : unbound (RHSA-2024:0965)
2024-02-26 00:00:00
redhat
redhat
(RHSA-2024:0981) Important: unbound security update
2024-02-26 09:13:42
(RHSA-2024:0982) Important: unbound security update
2024-02-26 09:15:03
(RHSA-2024:0965) Important: unbound security update
2024-02-26 00:56:26
osv
osv
Important: unbound security update
2024-02-26 00:00:00
Important: dnsmasq security update
2024-03-14 00:00:00
unbound vulnerabilities
2024-02-28 13:10:23
amazon
amazon
Important: unbound
2024-02-29 10:03:00
Important: bind
2024-04-24 22:15:00
almalinux
almalinux
Important: dnsmasq security update
2024-03-14 00:00:00
Important: unbound security update
2024-02-26 00:00:00
Important: unbound security update
2024-02-26 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0039)
2024-02-19 00:00:00
Fedora: Security Advisory for pdns-recursor (FEDORA-2024-b0f9656a76)
2024-02-23 00:00:00
Debian: Security Advisory (DLA-3736-1)
2024-02-22 00:00:00
akamaiblog
akamaiblog
oraclelinux
oraclelinux
unbound security update
2024-02-28 00:00:00
dnsmasq security update
2024-03-15 00:00:00
unbound security update
2024-02-28 00:00:00
debian
debian
[SECURITY] [DSA 5620-1] unbound security update
2024-02-14 06:49:32
[SECURITY] [DLA 3736-1] unbound security update
2024-02-21 12:20:40
[SECURITY] [DSA 5626-1] pdns-recursor security update
2024-02-18 16:35:24
rocky
rocky
dnsmasq security update
2024-03-27 04:34:32
bind and dhcp security update
2024-05-06 13:04:07
bind and dhcp security update
2024-06-14 13:59:16
ubuntu
ubuntu
Bind vulnerabilities
2024-04-09 00:00:00
Unbound vulnerabilities
2024-02-28 00:00:00
Dnsmasq vulnerabilities
2024-02-26 00:00:00
redos
redos
ROS-20240410-09
2024-04-10 00:00:00
mageia
mageia
Updated dnsmasq packages fix security vulnerabilities
2024-02-18 04:49:05
Updated unbound packages fix security vulnerabilities
2024-02-17 03:55:07
fedora
fedora
[SECURITY] Fedora 39 Update: dnsmasq-2.90-1.fc39
2024-02-19 02:29:29
[SECURITY] Fedora 38 Update: dnsmasq-2.90-1.fc38
2024-02-29 01:59:13
[SECURITY] Fedora 39 Update: unbound-1.19.1-2.fc39
2024-02-18 00:55:50
freebsd_advisory
freebsd_advisory
FreeBSD-SA-24:03.unbound
2024-03-28 00:00:00
cloudlinux
cloudlinux
bind: Fix of 2 CVEs
2024-03-14 17:26:05
slackware
slackware
[slackware-security] dnsmasq
2024-02-14 04:22:19
cloudfoundry
cloudfoundry
USN-6665-1: Unbound vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0205
2024-02-14 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0731
2024-02-28 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0726
2024-02-14 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
Related for ALSA-2024:1334