vulnerability
Red Hat: CVE-2023-28450: dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Mar 15, 2023 | Nov 8, 2023 | Jul 9, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Mar 15, 2023
Added
Nov 8, 2023
Modified
Jul 9, 2025
Description
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.
Solution(s)
no-fix-redhat-rpm-packageredhat-upgrade-dnsmasqredhat-upgrade-dnsmasq-debuginforedhat-upgrade-dnsmasq-debugsourceredhat-upgrade-dnsmasq-utilsredhat-upgrade-dnsmasq-utils-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.