Summary
Edwin Török discovered that Dnsmasq incorrectly handled certain CNAME
responses. A remote attacker could use this issue to cause Dnsmasq to
crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | dnsmasq | 2.75-1ubuntu0.16.04.1 |
Vulnerabilities 1
-
Unscored —
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address th…
References
-
report
https://ubuntu.com/security/CVE-2015-8899