Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-14834: A flaw was found in the Dnsmasq application where a remote attacker can trigger a memory leak by sending specially crafted DHCP responses to the server. A successful attack is dependent on a specific configuration regarding the domain name set into the dnsmasq.conf file. Over time, the memory leak may cause the process to run out of memory and terminate, causing a denial of service. 1764425: CVE-2019-14834 dnsmasq: memory leak in the create_helper() function in /src/helper.c
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | dnsmasq | 0:2.76-16.amzn2.0.1 |
| Amazon Linux · 2 | dnsmasq-debuginfo | 0:2.76-16.amzn2.0.1 |
| Amazon Linux · 2 | dnsmasq-utils | 0:2.76-16.amzn2.0.1 |
Vulnerabilities 1
-
Low 3.7
A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a deni…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-14834.html