Veracode Vulnerability DatabaseVERACODE:45490Denial Of Service
dnsmasq is vulnerable to Denial Of Service. The attacker can exploit this vulnerability by sending crafted DNSSEC responses to the target system, causing it to consume excessive CPU resources.
References
www.openwall.com/lists/oss-security/2024/02/16/2
www.openwall.com/lists/oss-security/2024/02/16/3
access.redhat.com/security/cve/CVE-2023-50868
bugzilla.suse.com/show_bug.cgi?id=1219826
datatracker.ietf.org/doc/html/rfc5155
docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1
kb.isc.org/docs/cve-2023-50868
lists.debian.org/debian-lts-announce/2024/02/msg00006.html
lists.debian.org/debian-lts-announce/2024/05/msg00011.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/
lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html
nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
security-tracker.debian.org/tracker/CVE-2023-50868
security.netapp.com/advisory/ntap-20240307-0008/
www.isc.org/blogs/2024-bind-security-release/
Related
