(RHSA-2024:1522) Important: dnsmasq security update

2024-03-2612:26:32

access.redhat.com

dnsmasq lightweight dns

dhcp server

security fix

extreme cpu consumption

dnssec validator

preparing an nsec3

cpu resources

cve page listed.

7.2 High

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%

JSON

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
dnsmasq: bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390xdnsmasq-debugsource< 2.85-6.el9_2.3dnsmasq-debugsource-2.85-6.el9_2.3.s390x.rpm
RedHat9x86_64dnsmasq< 2.85-6.el9_2.3dnsmasq-2.85-6.el9_2.3.x86_64.rpm
RedHat9ppc64lednsmasq< 2.85-6.el9_2.3dnsmasq-2.85-6.el9_2.3.ppc64le.rpm
RedHat9ppc64lednsmasq-debuginfo< 2.85-6.el9_2.3dnsmasq-debuginfo-2.85-6.el9_2.3.ppc64le.rpm
RedHat9s390xdnsmasq< 2.85-6.el9_2.3dnsmasq-2.85-6.el9_2.3.s390x.rpm
RedHat9s390xdnsmasq-debuginfo< 2.85-6.el9_2.3dnsmasq-debuginfo-2.85-6.el9_2.3.s390x.rpm
RedHat9x86_64dnsmasq-debuginfo< 2.85-6.el9_2.3dnsmasq-debuginfo-2.85-6.el9_2.3.x86_64.rpm
RedHat9s390xdnsmasq-utils< 2.85-6.el9_2.3dnsmasq-utils-2.85-6.el9_2.3.s390x.rpm
RedHat9ppc64lednsmasq-utils-debuginfo< 2.85-6.el9_2.3dnsmasq-utils-debuginfo-2.85-6.el9_2.3.ppc64le.rpm
RedHat9x86_64dnsmasq-debugsource< 2.85-6.el9_2.3dnsmasq-debugsource-2.85-6.el9_2.3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	s390x	dnsmasq-debugsource	< 2.85-6.el9_2.3	dnsmasq-debugsource-2.85-6.el9_2.3.s390x.rpm
RedHat	9	x86_64	dnsmasq	< 2.85-6.el9_2.3	dnsmasq-2.85-6.el9_2.3.x86_64.rpm
RedHat	9	ppc64le	dnsmasq	< 2.85-6.el9_2.3	dnsmasq-2.85-6.el9_2.3.ppc64le.rpm
RedHat	9	ppc64le	dnsmasq-debuginfo	< 2.85-6.el9_2.3	dnsmasq-debuginfo-2.85-6.el9_2.3.ppc64le.rpm
RedHat	9	s390x	dnsmasq	< 2.85-6.el9_2.3	dnsmasq-2.85-6.el9_2.3.s390x.rpm
RedHat	9	s390x	dnsmasq-debuginfo	< 2.85-6.el9_2.3	dnsmasq-debuginfo-2.85-6.el9_2.3.s390x.rpm
RedHat	9	x86_64	dnsmasq-debuginfo	< 2.85-6.el9_2.3	dnsmasq-debuginfo-2.85-6.el9_2.3.x86_64.rpm
RedHat	9	s390x	dnsmasq-utils	< 2.85-6.el9_2.3	dnsmasq-utils-2.85-6.el9_2.3.s390x.rpm
RedHat	9	ppc64le	dnsmasq-utils-debuginfo	< 2.85-6.el9_2.3	dnsmasq-utils-debuginfo-2.85-6.el9_2.3.ppc64le.rpm
RedHat	9	x86_64	dnsmasq-debugsource	< 2.85-6.el9_2.3	dnsmasq-debugsource-2.85-6.el9_2.3.x86_64.rpm