Dnsmasq vulnerabilities

2024-04-2400:00:00

ubuntu.com

dns caching server

dhcp/tftp server

remote attack

denial of service

dnssec

nsec3

edns.0

ubuntu 16.04

ubuntu 18.04

ubuntu 23.10

security advisory

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.05

Percentile

93.0%

JSON

Releases

Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages

dnsmasq - Small caching DNS proxy and DHCP/TFTP server

Details

USN-6657-1 fixed several vulnerabilities in Dnsmasq. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered
that Dnsmasq icorrectly handled validating DNSSEC messages. A remote
attacker could possibly use this issue to cause Dnsmasq to consume
resources, leading to a denial of service. (CVE-2023-50387)

It was discovered that Dnsmasq incorrectly handled preparing an NSEC3
closest encloser proof. A remote attacker could possibly use this issue to
cause Dnsmasq to consume resources, leading to a denial of service.
(CVE-2023-50868)

It was discovered that Dnsmasq incorrectly set the maximum EDNS.0 UDP
packet size as required by DNS Flag Day 2020. This issue only affected
Ubuntu 23.10. (CVE-2023-28450)

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchdnsmasq-base< 2.90-0ubuntu0.18.04.1+esm1UNKNOWN
Ubuntu18.04noarchdnsmasq< 2.79-1ubuntu0.7UNKNOWN
Ubuntu18.04noarchdnsmasq-base< 2.79-1ubuntu0.7UNKNOWN
Ubuntu18.04noarchdnsmasq-base-lua< 2.79-1ubuntu0.7UNKNOWN
Ubuntu18.04noarchdnsmasq-utils< 2.79-1ubuntu0.7UNKNOWN
Ubuntu16.04noarchdnsmasq-base< 2.90-0ubuntu0.16.04.1+esm1UNKNOWN
Ubuntu16.04noarchdnsmasq< 2.75-1ubuntu0.16.04.10UNKNOWN
Ubuntu16.04noarchdnsmasq-base< 2.75-1ubuntu0.16.04.10UNKNOWN
Ubuntu16.04noarchdnsmasq-utils< 2.75-1ubuntu0.16.04.10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	dnsmasq-base	< 2.90-0ubuntu0.18.04.1+esm1	UNKNOWN
Ubuntu	18.04	noarch	dnsmasq	< 2.79-1ubuntu0.7	UNKNOWN
Ubuntu	18.04	noarch	dnsmasq-base	< 2.79-1ubuntu0.7	UNKNOWN
Ubuntu	18.04	noarch	dnsmasq-base-lua	< 2.79-1ubuntu0.7	UNKNOWN
Ubuntu	18.04	noarch	dnsmasq-utils	< 2.79-1ubuntu0.7	UNKNOWN
Ubuntu	16.04	noarch	dnsmasq-base	< 2.90-0ubuntu0.16.04.1+esm1	UNKNOWN
Ubuntu	16.04	noarch	dnsmasq	< 2.75-1ubuntu0.16.04.10	UNKNOWN
Ubuntu	16.04	noarch	dnsmasq-base	< 2.75-1ubuntu0.16.04.10	UNKNOWN
Ubuntu	16.04	noarch	dnsmasq-utils	< 2.75-1ubuntu0.16.04.10	UNKNOWN