Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Mageia 7 and 8: MGASA-2021-0231 Critical: Dnsmasq DNS Cache Poisoning

mageia
Calendar Grey June 8, 2021
Dist Mageia Esm H88
Recent revisions to the dnsmasq packages in Mageia rectify a serious security vulnerability that opens the door to DNS Cache Poisoning incidents.
A flaw was found in dnsmasq in versions before 2.85

Summary

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier (CVE-2021-3448). This kind of configuration is the default when network-manager uses dnsmasq.

References

- https://bugs.mageia.org/show_bug.cgi?id=29030

- https://bugzilla.redhat.com/show_bug.cgi?id=1939368

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/

- https://www.cve.org/CVERecord?id=CVE-2021-3448

Topics%20covered

Topics Covered

security advisory critical issue cache poisoning network attack dnsmasq mageia

Resolution

SRPMS

- 7/core/dnsmasq-2.85-1.mga7

- 8/core/dnsmasq-2.85-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 08 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0231.html
Type: security
CVE: CVE-2021-3448

Topics%20covered

Topics Covered

security advisory critical issue cache poisoning network attack dnsmasq mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here