dnsmasq: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• Unscored —
  CVE-2020-25681 EPSS 84%

  A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sort…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25682 EPSS 75%

  A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract name…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25683 EPSS 89%

  A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is …

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25684

  A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the for…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25685

  A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25686 Public exploit

  A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25687 EPSS 89%

  A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is …

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021

Revision history

1. 2023-11-06 #15

   Neue Updates von Oracle Linux aufgenommen

2. 2021-06-30 #14

   Neue Updates von QNAP aufgenommen

3. 2021-03-22 #13

   Neue Updates von Debian aufgenommen

4. 2021-03-04 #12

   Neue Updates von AVAYA aufgenommen

5. 2021-02-24 #11

   Neue Updates von Ubuntu aufgenommen

6. 2021-02-23 #10

   Neue Updates von Aruba aufgenommen

7. 2021-02-04 #9

   Neue Updates von Debian aufgenommen

8. 2021-02-03 #8

   Neue Updates von Red Hat und Amazon aufgenommen

9. 2021-02-02 #7

   Neue Updates von Red Hat aufgenommen

10. 2021-01-26 #6

    Neue Updates von CentOS aufgenommen

11. 2021-01-25 #5

    Neue Updates von Red Hat und Gentoo aufgenommen

12. 2021-01-24 #4

    Neue Updates von Synology aufgenommen

13. 2021-01-20 #3

    Neue Updates von Arch Linux aufgenommen

14. 2021-01-19 #2

    Neue Updates von Arista, Cisco, Ubuntu, Red Hat, Oracle Linux und SUSE aufgenommen

15. 2021-01-18 #1

    Initiale Fassung

References

• Oracle Linux Security Advisory ELSA-2023-12971 vom 2023-11-06
  https://linux.oracle.com/errata/ELSA-2023-12971.html
• Oracle Linux Security Advisory ELSA-2023-12972 vom 2023-11-06
  https://linux.oracle.com/errata/ELSA-2023-12972.html
• Debian Security Advisory DLA-2604 vom 2021-03-22
  https://lists.debian.org/debian-lts-announce/2021/03/msg00027.html
• Cisco Security Advisory CISCO-SA-DNSMASQ-DNS-2021-C5MRDF3G vom 2021-01-18
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mrdf3g
• DNSpooq Attack vom 2021-01-18
  https://www.jsof-tech.com/disclosures/dnspooq/
• Arista Security Advisory 61 vom 2021-01-19
  https://www.arista.com/en/support/advisories-notices/security-advisories/12135-security-advisory-61
• Ubuntu Security Notice USN-4698-1 vom 2021-01-19
  https://usn.ubuntu.com/4698-1
• Red Hat Security Advisory RHSA-2021:0150 vom 2021-01-19
  https://access.redhat.com/errata/RHSA-2021:0150
• Red Hat Security Advisory RHSA-2021:0151 vom 2021-01-19
  https://access.redhat.com/errata/RHSA-2021:0151
• Red Hat Security Advisory RHSA-2021:0152 vom 2021-01-19
  https://access.redhat.com/errata/RHSA-2021:0152
• Red Hat Security Advisory RHSA-2021:0153 vom 2021-01-19
  https://access.redhat.com/errata/RHSA-2021:0153
• Red Hat Security Advisory RHSA-2021:0154 vom 2021-01-19
  https://access.redhat.com/errata/RHSA-2021:0154
• Red Hat Security Advisory RHSA-2021:0155 vom 2021-01-19
  https://access.redhat.com/errata/RHSA-2021:0155
• Red Hat Security Advisory RHSA-2021:0156 vom 2021-01-19
  https://access.redhat.com/errata/RHSA-2021:0156
• Oracle Linux Security Advisory ELSA-2021-0153 vom 2021-01-19
  http://linux.oracle.com/errata/ELSA-2021-0153.html
• Oracle Linux Security Advisory ELSA-2021-0150 vom 2021-01-20
  https://linux.oracle.com/errata/ELSA-2021-0150.html
• SUSE Security Update SUSE-SU-2021:0163-1 vom 2021-01-19
  https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html
• SUSE Security Update SUSE-SU-2021:14603-1 vom 2021-01-19
  https://lists.suse.com/pipermail/sle-security-updates/2021-January/008224.html
• SUSE Security Update SUSE-SU-2021:0166-1 vom 2021-01-19
  https://lists.suse.com/pipermail/sle-security-updates/2021-January/008223.html
• SUSE Security Update SUSE-SU-2021:0162-1 vom 2021-01-19
  https://lists.suse.com/pipermail/sle-security-updates/2021-January/008225.html
• SUSE Security Update SUSE-SU-2021:14604-1 vom 2021-01-19
  https://lists.suse.com/pipermail/sle-security-updates/2021-January/008226.html
• ICS CERT Advisory ICSA-21-019-01 vom 2021-01-19
  https://us-cert.cisa.gov/ics/advisories/icsa-21-019-01
• Changelog dnsmasq
  http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
• Arch Linux Security Advisory ASA-202101-38 vom 2021-01-21
  https://security.archlinux.org/ASA-202101-38/generate
• Synology Security Advisory SYNOLOGY-SA-21:01 vom 2021-01-25
  https://www.synology.com/en-global/support/security/Synology_SA_21_01
• Red Hat Security Advisory RHSA-2021:0240 vom 2021-01-25
  https://access.redhat.com/errata/RHSA-2021:0240
• Gentoo Linux Security Advisory GLSA-202101-17 vom 2021-01-25
  https://security.gentoo.org/glsa/202101-17
• Red Hat Security Advisory RHSA-2021:0245 vom 2021-01-25
  https://access.redhat.com/errata/RHSA-2021:0245
• CentOS Security Advisory CESA-2021:0153 vom 2021-01-26
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2021-0153-Moderate-CentOS-7-dnsmasq-Security-Update-tp4646120.html
• Zyxel security advisory for DNSpooq vom 2021-01-26
  https://www.zyxel.com/support/DNSpooq.shtml
• Red Hat Security Advisory RHSA-2021:0281 vom 2021-02-03
  https://access.redhat.com/errata/RHSA-2021:0281
• Red Hat Security Advisory RHSA-2021:0395 vom 2021-02-03
  https://access.redhat.com/errata/RHSA-2021:0395
• Red Hat Security Advisory RHSA-2021:0401 vom 2021-02-03
  https://access.redhat.com/errata/RHSA-2021:0401
• Amazon Linux Security Advisory ALAS-2021-1587 vom 2021-02-03
  https://alas.aws.amazon.com/AL2/ALAS-2021-1587.html
• Debian Security Advisory DSA-4844 vom 2021-02-04
  https://www.debian.org/security/2021/dsa-4844
• Aruba Product Security Advisory
  https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-006.txt
• Ubuntu Security Notice USN-4698-2 vom 2021-02-24
  https://ubuntu.com/security/notices/USN-4698-2
• AVAYA Security Advisory ASA-2021-006 vom 2021-03-03
  https://downloads.avaya.com/css/P8/documents/101074267
• QNAP Security Advisory QSA-21-09 vom 2021-06-30
  https://www.qnap.com/de-de/security-advisory/QSA-21-09