DeutschShown in its original language — a full translation is planned for a future version.
dnsmasq: Mehrere Schwachstellen
view advisory published 2021-01-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in dnsmasq und mehreren Cisco Produkten ausnutzen, um beliebigen Programmcode auszuführen und um den DNS Cache zu manipulieren.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25687US | medium5.9 | — | ||
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. Thi… | ||||
| CVE-2020-25686US | low3.7OT elevated | Exploit | ||
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By def… | ||||
| CVE-2020-25682US | high8.1 | — | ||
A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. A… | ||||
| CVE-2020-25681US | high8.1 | — | ||
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the net… | ||||
| CVE-2020-25685US | low3.7 | — | ||
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches t… | ||||
| CVE-2020-25684US | low3.7 | — | ||
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is… | ||||
| CVE-2020-25683US | medium5.9 | — | ||
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A r… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2021:0153 vom 2021-01-26external
- Oracle Linux Security Advisory ELSA-2021-0153 vom 2021-01-19external
- Changelog dnsmasqexternal
- Red Hat Security Advisory RHSA-2021:0150 vom 2021-01-19external
- Red Hat Security Advisory RHSA-2021:0151 vom 2021-01-19external
- Red Hat Security Advisory RHSA-2021:0152 vom 2021-01-19external
- Red Hat Security Advisory RHSA-2021:0153 vom 2021-01-19external
- Red Hat Security Advisory RHSA-2021:0154 vom 2021-01-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan