Denial Of Service (DoS)

🗓️ 20 Jan 2021 16:17:41Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 42 Views

dnsmasq vulnerable to denial of service due to heap-based buffer overflow in rfc1035.c:extract_name() function

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 129
UbuntuCve	CVE-2020-25683	19 Jan 202100:00	–	ubuntucve
CVE	CVE-2020-25683	20 Jan 202116:15	–	cve
AlpineLinux	CVE-2020-25683	20 Jan 202116:15	–	alpinelinux
Cvelist	CVE-2020-25683	20 Jan 202115:25	–	cvelist
RedhatCVE	CVE-2020-25683	19 Jan 202112:18	–	redhatcve
Debian CVE	CVE-2020-25683	20 Jan 202116:15	–	debiancve
Prion	Heap overflow	20 Jan 202116:15	–	prion
OSV	UBUNTU-CVE-2020-25683	19 Jan 202100:00	–	osv
OSV	CVE-2020-25683	20 Jan 202116:15	–	osv
OSV	DLA-2604-1 dnsmasq - security update	22 Mar 202100:00	–	osv

Vulners

Node

dnsmasq dnsmasqMatch2.81-r0os

AND

alpinelinux alpine_linuxMatch3.12

apache groovyMatch2.81-4build1debian

AND

apache groovyMatch2.82-1ubuntu1debian

AND

debian debian_linux

focal focalMatch2.80-1.1ubuntu1debian

AND

debian debian_linux

xenial xenialMatch2.75-1ubuntu0.16.04.5debian

AND

debian debian_linux

dnsmasq dnsmasqMatch2.82-1debian

AND

debian debian_linuxMatch999

dnsmasq dnsmasqMatch2.80-r5os

AND

alpinelinux alpine_linuxMatch3.11

dnsmasq dnsmasqMatch2.82-1debian

AND

debian debian_linuxMatch11

dnsmasq dnsmasqMatch2.80-r4os

AND

alpinelinux alpine_linuxMatch3.10

devel develMatch2.81-4build1debian

AND

devel develMatch2.82-1ubuntu1debian

AND

debian debian_linux

dnsmasq dnsmasqMatch2.76-5+deb9u2debian

AND

debian debian_linuxMatch9

dnsmasq dnsmasqMatch2.80-r5os

AND

dnsmasq dnsmasqMatch2.81-r0os

AND

alpinelinux alpine_linuxMatchedge

hirsute hirsuteMatch2.82-1ubuntu1debian

AND

debian debian_linux

dnsmasq dnsmasqMatch2.79_11.el8

dnsmasq dnsmasqMatch2.79_6.el8

dnsmasq dnsmasqMatch2.79_4.el8

dnsmasq dnsmasqMatch2.79_11.el8_2.1

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2021/03/msg00027.html
secdb	www.secdb.alpinelinux.org/v3.12/main.yaml
debian	www.debian.org/security/2021/dsa-4844
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QGB7HL3OWHTLEPSMLDGOMXQKG3KM2QME/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGB7HL3OWHTLEPSMLDGOMXQKG3KM2QME/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WYW3IR6APUSKOYKL5FT3ACTIHWHGQY32/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYW3IR6APUSKOYKL5FT3ACTIHWHGQY32/
security	www.security.gentoo.org/glsa/202101-17
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
jsof-tech	www.jsof-tech.com/disclosures/dnspooq/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Jan 2021 16:41Current

3.8Low risk

Vulners AI Score3.8

CVSS27.1

CVSS35.9

EPSS0.28959