Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 7 MGASA-2021-0059 Critical Dnsmasq Buffer Overflow

mageia
Calendar Grey January 29, 2021
Dist Mageia Esm H88
Mageia 2021-0060 delivers a series of security updates for openssl, tackling critical weaknesses and risks that have been identified.
Multiples vulnerabilities have been discovered in dnsmasq up to version 2.82: - subtle errors in dnsmasq's protections against cache-poisoning attacks (CVE-2020-25684, CVE-2020-25...

Summary

Multiples vulnerabilities have been discovered in dnsmasq up to version 2.82: - subtle errors in dnsmasq's protections against cache-poisoning attacks (CVE-2020-25684, CVE-2020-25685 and CVE-2020-25686) - buffer overflow in dnsmasq's DNSSEC code (CVE-2020-25681, CVE-2020-25682, CVE-2020-25683 and CVE-2020-25687)

References

- https://bugs.mageia.org/show_bug.cgi?id=28169

- https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q1/014599.html

- https://www.openwall.com/lists/oss-security/2021/01/19/1

- https://www.cve.org/CVERecord?id=CVE-2020-25681

- https://www.cve.org/CVERecord?id=CVE-2020-25682

- https://www.cve.org/CVERecord?id=CVE-2020-25683

- https://www.cve.org/CVERecord?id=CVE-2020-25684

- https://www.cve.org/CVERecord?id=CVE-2020-25685

- https://www.cve.org/CVERecord?id=CVE-2020-25686

- https://www.cve.org/CVERecord?id=CVE-2020-25687

Topics%20covered

Topics Covered

security advisory security issue buffer overflow critical security fix cache poisoning critical severity dnsmasq Mageia

Resolution

SRPMS

- 7/core/dnsmasq-2.83-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 29 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0059.html
Type: security
CVE: CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687

Topics%20covered

Topics Covered

security advisory security issue buffer overflow critical security fix cache poisoning critical severity dnsmasq Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here