Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5408-1
HistoryMay 10, 2022 - 12:00 a.m.

Dnsmasq vulnerability

2022-05-1000:00:00
ubuntu.com
94
ubuntu 22.04 lts
ubuntu 21.10
ubuntu 20.04 lts
ubuntu 18.04 esm
ubuntu 16.04 esm
ubuntu 14.04 esm
dnsmasq
vulnerability
code execution

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

60.5%

JSON

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 21.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • dnsmasq - Small caching DNS proxy and DHCP/TFTP server

Details

Petr Menšík and Richard Johnson discovered that Dnsmasq incorrectly handled
certain inputs. An attacker could possibly use this issue to execute
arbitrary code or expose sensitive information.

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchdnsmasq< 2.86-1.1ubuntu0.1UNKNOWN
Ubuntu22.04noarchdnsmasq-base< 2.86-1.1ubuntu0.1UNKNOWN
Ubuntu22.04noarchdnsmasq-base-lua< 2.86-1.1ubuntu0.1UNKNOWN
Ubuntu22.04noarchdnsmasq-utils< 2.86-1.1ubuntu0.1UNKNOWN
Ubuntu21.10noarchdnsmasq< 2.85-1ubuntu2.1UNKNOWN
Ubuntu21.10noarchdnsmasq-base< 2.85-1ubuntu2.1UNKNOWN
Ubuntu21.10noarchdnsmasq-base-lua< 2.85-1ubuntu2.1UNKNOWN
Ubuntu21.10noarchdnsmasq-utils< 2.85-1ubuntu2.1UNKNOWN
Ubuntu20.04noarchdnsmasq< 2.80-1.1ubuntu1.5UNKNOWN
Ubuntu20.04noarchdnsmasq-base< 2.80-1.1ubuntu1.5UNKNOWN
Rows per page:
1-10 of 271

Related

suse 1
nessus 41
openvas 21
freebsd 1
redos 1
redhatcve 1
osv 7
oraclelinux 4
ubuntucve 1
nvd 1
debiancve 1
almalinux 2
slackware 1
cbl_mariner 1
cvelist 1
cve 1
veracode 1
rocky 2
prion 1
redhat 5
mageia 1
rosalinux 1
alpinelinux 1
photon 2
oracle 1
avleonov 1
suse
suse
Security update for dnsmasq (important)
2022-04-22 00:00:00
nessus
nessus
CentOS 9 : dnsmasq-2.85-4.el9
2024-02-29 00:00:00
EulerOS 2.0 SP8 : dnsmasq (EulerOS-SA-2022-1925)
2022-06-22 00:00:00
EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2022-2252)
2022-08-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5408-1)
2022-05-11 00:00:00
Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2022-2378)
2022-09-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1307-1)
2022-04-25 00:00:00
freebsd
freebsd
dnsmasq -- heap use-after-free in dhcp6_no_relay
2022-03-31 00:00:00
redos
redos
ROS-20220524-02
2022-05-24 00:00:00
redhatcve
redhatcve
CVE-2022-0934
2022-03-31 20:47:15
osv
osv
Moderate: dnsmasq security and bug fix update
2022-11-15 00:00:00
dnsmasq vulnerability
2022-05-10 17:44:53
Moderate: dnsmasq security and bug fix update
2022-11-08 06:25:10
oraclelinux
oraclelinux
dnsmasq security and bug fix update
2022-11-22 00:00:00
dnsmasq security and bug fix update
2022-11-15 00:00:00
dnsmasq security update
2023-10-24 00:00:00
ubuntucve
ubuntucve
CVE-2022-0934
2022-04-07 00:00:00
nvd
nvd
CVE-2022-0934
2022-08-29 15:15:10
debiancve
debiancve
CVE-2022-0934
2022-08-29 15:15:10
almalinux
almalinux
Moderate: dnsmasq security and bug fix update
2022-11-15 00:00:00
Moderate: dnsmasq security and bug fix update
2022-11-08 00:00:00
slackware
slackware
[slackware-security] dnsmasq
2022-09-26 19:50:21
cbl_mariner
cbl_mariner
CVE-2022-0934 affecting package dnsmasq for versions less than 2.89-1
2023-03-24 23:55:40
cvelist
cvelist
CVE-2022-0934
2022-08-29 14:03:02
cve
cve
CVE-2022-0934
2022-08-29 15:15:10
veracode
veracode
Use-After-Free
2022-04-11 23:10:08
rocky
rocky
dnsmasq security and bug fix update
2022-11-08 06:25:10
dnsmasq security and bug fix update
2022-11-15 06:15:01
prion
prion
Design/Logic Flaw
2022-08-29 15:15:00
redhat
redhat
(RHSA-2022:8070) Moderate: dnsmasq security and bug fix update
2022-11-15 06:15:01
(RHSA-2022:7633) Moderate: dnsmasq security and bug fix update
2022-11-08 06:25:10
(RHSA-2024:1545) Important: dnsmasq security update
2024-03-27 14:46:06
mageia
mageia
Updated dnsmasq packages fix security vulnerability
2022-06-19 00:30:41
rosalinux
rosalinux
Advisory ROSA-SA-2023-2287
2023-10-31 14:41:51
alpinelinux
alpinelinux
CVE-2022-0934
2022-08-29 15:15:10
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0352
2023-03-09 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0547
2023-03-10 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

60.5%

JSON
Related for USN-5408-1
suse1nessus41openvas21freebsd1redos1redhatcve1osv7oraclelinux4ubuntucve1nvd1debiancve1almalinux2slackware1cbl_mariner1cvelist1cve1veracode1rocky2prion1redhat5mageia1rosalinux1alpinelinux1photon2oracle1avleonov1