Lucene search

K
redhatcveRedhat.comRH:CVE-2023-28450
HistoryMar 16, 2023 - 9:42 a.m.

CVE-2023-28450

2023-03-1609:42:25
redhat.com
access.redhat.com
72

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

A flaw was found in Dnsmasq. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

Mitigation

Systems that can not be updated can still configure dnsmasq to use the recommended maximum EDNS value by setting edns-packet-max=1232 in the dnsmasq configuration.