A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dnsmasqUpgrade dnsmasq-utils | May 4, 2022 | Apr 8, 2021 |
| Alpine Linux | — | Upgrade dnsmasq | Mar 26, 2024 | Apr 8, 2021 |
| Centos_linux | — | Upgrade dnsmasq-debuginfoUpgrade dnsmasq-debugsourceUpgrade dnsmasqUpgrade dnsmasq-utils-debuginfoUpgrade dnsmasq-utils | Nov 10, 2021 | Apr 8, 2021 |
| Debian | — | Upgrade dnsmasq | Jul 30, 2024 | Apr 8, 2021 |
| Freebsd | — | Upgrade dnsmasq-develUpgrade dnsmasq | Mar 18, 2021 | Mar 18, 2021 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | May 28, 2021 | Apr 8, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade dnsmasq-utilsUpgrade dnsmasq | Mar 9, 2023 | Apr 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade dnsmasqUpgrade dnsmasq-utils | Sep 24, 2021 | Apr 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dnsmasq | Aug 10, 2021 | Apr 8, 2021 |
| Oracle_linux | — | Upgrade dnsmasqUpgrade dnsmasq-utils | Jul 22, 2024 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade dnsmasq-debuginfoNo solution existsUpgrade dnsmasq-utils-debuginfoUpgrade dnsmasq-utilsUpgrade dnsmasq-debugsourceUpgrade dnsmasq | Nov 10, 2021 | Apr 8, 2021 |
| Rocky_linux | — | Upgrade dnsmasq-debuginfoUpgrade dnsmasq-debugsourceUpgrade dnsmasqUpgrade dnsmasq-utilsUpgrade dnsmasq-utils-debuginfo | Mar 12, 2024 | Apr 8, 2021 |
| Suse | — | Upgrade dnsmasq-utilsUpgrade dnsmasq | Oct 28, 2021 | Mar 17, 2021 |
| Ubuntu | — | Upgrade dnsmasq (Ubuntu Pro)Upgrade dnsmasq-utils (Ubuntu Pro)Upgrade dnsmasqUpgrade dnsmasq-base (Ubuntu Pro)Upgrade dnsmasq-utilsUpgrade dnsmasq-base | Jun 3, 2021 | Mar 17, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub