Summary
Petr Mensik discovered that Dnsmasq incorrectly randomized source ports in
certain configurations. A remote attacker could possibly use this issue to
facilitate DNS cache poisoning attacks.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | dnsmasq | 2.79-1ubuntu0.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | dnsmasq | 2.80-1.1ubuntu1.4 |
Vulnerabilities 1
-
Medium 4.0
A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network inter…
References
-
report
https://ubuntu.com/security/CVE-2021-3448