(RHSA-2024:1334) Important: dnsmasq security update

2024-03-1415:13:24

access.redhat.com

dnsmasq

security update

cpu consumption

dnssec validator

dhcp server

7.2 High

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%

JSON

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC
validator (CVE-2023-50387)
dnsmasq: bind9: Preparing an NSEC3 closest encloser proof can
exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64dnsmasq-utils< 2.85-14.el9_3.1dnsmasq-utils-2.85-14.el9_3.1.x86_64.rpm
RedHat9s390xdnsmasq-debuginfo< 2.85-14.el9_3.1dnsmasq-debuginfo-2.85-14.el9_3.1.s390x.rpm
RedHat9aarch64dnsmasq-utils< 2.85-14.el9_3.1dnsmasq-utils-2.85-14.el9_3.1.aarch64.rpm
RedHat9s390xdnsmasq-utils< 2.85-14.el9_3.1dnsmasq-utils-2.85-14.el9_3.1.s390x.rpm
RedHat9ppc64lednsmasq-debuginfo< 2.85-14.el9_3.1dnsmasq-debuginfo-2.85-14.el9_3.1.ppc64le.rpm
RedHat9s390xdnsmasq-utils-debuginfo< 2.85-14.el9_3.1dnsmasq-utils-debuginfo-2.85-14.el9_3.1.s390x.rpm
RedHat9ppc64lednsmasq< 2.85-14.el9_3.1dnsmasq-2.85-14.el9_3.1.ppc64le.rpm
RedHat9aarch64dnsmasq-utils-debuginfo< 2.85-14.el9_3.1dnsmasq-utils-debuginfo-2.85-14.el9_3.1.aarch64.rpm
RedHat9x86_64dnsmasq-utils-debuginfo< 2.85-14.el9_3.1dnsmasq-utils-debuginfo-2.85-14.el9_3.1.x86_64.rpm
RedHat9x86_64dnsmasq< 2.85-14.el9_3.1dnsmasq-2.85-14.el9_3.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	x86_64	dnsmasq-utils	< 2.85-14.el9_3.1	dnsmasq-utils-2.85-14.el9_3.1.x86_64.rpm
RedHat	9	s390x	dnsmasq-debuginfo	< 2.85-14.el9_3.1	dnsmasq-debuginfo-2.85-14.el9_3.1.s390x.rpm
RedHat	9	aarch64	dnsmasq-utils	< 2.85-14.el9_3.1	dnsmasq-utils-2.85-14.el9_3.1.aarch64.rpm
RedHat	9	s390x	dnsmasq-utils	< 2.85-14.el9_3.1	dnsmasq-utils-2.85-14.el9_3.1.s390x.rpm
RedHat	9	ppc64le	dnsmasq-debuginfo	< 2.85-14.el9_3.1	dnsmasq-debuginfo-2.85-14.el9_3.1.ppc64le.rpm
RedHat	9	s390x	dnsmasq-utils-debuginfo	< 2.85-14.el9_3.1	dnsmasq-utils-debuginfo-2.85-14.el9_3.1.s390x.rpm
RedHat	9	ppc64le	dnsmasq	< 2.85-14.el9_3.1	dnsmasq-2.85-14.el9_3.1.ppc64le.rpm
RedHat	9	aarch64	dnsmasq-utils-debuginfo	< 2.85-14.el9_3.1	dnsmasq-utils-debuginfo-2.85-14.el9_3.1.aarch64.rpm
RedHat	9	x86_64	dnsmasq-utils-debuginfo	< 2.85-14.el9_3.1	dnsmasq-utils-debuginfo-2.85-14.el9_3.1.x86_64.rpm
RedHat	9	x86_64	dnsmasq	< 2.85-14.el9_3.1	dnsmasq-2.85-14.el9_3.1.x86_64.rpm