Skip to content
OpenAdvisories
Low ALAS2-2020-1507 1 CVE

Low: dnsmasq security update (Amazon Linux 2)

Published Oct 22, 2020 · Updated Oct 22, 2020

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-14834: A flaw was found in the Dnsmasq application where a remote attacker can trigger a memory leak by sending specially crafted DHCP responses to the server. A successful attack is dependent on a specific configuration regarding the domain name set into the dnsmasq.conf file. Over time, the memory leak may cause the process to run out of memory and terminate, causing a denial of service. 1764425: CVE-2019-14834 dnsmasq: memory leak in the create_helper() function in /src/helper.c

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2 dnsmasq 0:2.76-16.amzn2.0.1
Amazon Linux · 2 dnsmasq-debuginfo 0:2.76-16.amzn2.0.1
Amazon Linux · 2 dnsmasq-utils 0:2.76-16.amzn2.0.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-14834.html