USN-4924-1 — dnsmasq vulnerabilities

Summary

It was discovered that Dnsmasq incorrectly handled certain wildcard
synthesized NSEC records. A remote attacker could possibly use this issue
to prove the non-existence of hostnames that actually exist.
(CVE-2017-15107)

It was discovered that Dnsmasq incorrectly handled certain large DNS
packets. A remote attacker could possibly use this issue to cause Dnsmasq
to crash, resulting in a denial of service. (CVE-2019-14513)

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	dnsmasq	2.75-1ubuntu0.16.04.10

Vulnerabilities 2

Unscored —

CVE-2017-15107

A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSE…

Simon Kelley dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine

Jan 23, 2018
Unscored —

CVE-2019-14513

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that…

dnsmasq dnsmasq Debian Ubuntu

Aug 1, 2019

References

report
https://ubuntu.com/security/CVE-2017-15107
report
https://ubuntu.com/security/CVE-2019-14513

dnsmasq vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 2

A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSE…

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that…

References