ALAS2-2024-2580 — Moderate: dnsmasq security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-49441: dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.

Fixed packages 3

Release	Package	Fixed in
Amazon Linux · 2	dnsmasq	0:2.76-16.amzn2.1.5
Amazon Linux · 2	dnsmasq-debuginfo	0:2.76-16.amzn2.1.5
Amazon Linux · 2	dnsmasq-utils	0:2.76-16.amzn2.1.5

Vulnerabilities 1

High 7.5

CVE-2023-49441

dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.

dnsmasq dnsmasq Debian Ubuntu

Jun 6, 2024

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-49441.html