Red Hat Security Advisory: dnsmasq security update

Fixed packages 3

Vulnerabilities 3

• Unscored —
  CVE-2020-25684

  A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the for…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25685

  A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25686 Public exploit

  A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2021-001
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889688
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890125
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0240.json
• report
  https://access.redhat.com/security/cve/CVE-2020-25684
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25684
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25684
• article
  https://www.jsof-tech.com/disclosures/dnspooq/
• report
  https://access.redhat.com/security/cve/CVE-2020-25685
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25685
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25685
• report
  https://access.redhat.com/security/cve/CVE-2020-25686
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25686
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25686