Ubuntu 15.04 USN-2593-1 Moderate: Dnsmasq Denial Of Service Risk

ubuntu

May 4, 2015

Dnsmasq could be made to crash or expose sensitive information if it received specially crafted network traffic.

Summary

Dnsmasq could be made to crash or expose sensitive information if it

received specially crafted network traffic.

Software Description:

- dnsmasq: Small caching DNS proxy and DHCP/TFTP server

Details:

Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed

DNS requests. A remote attacker could use this issue to cause Dnsmasq to

crash, resulting in a denial of service, or possibly obtain sensitive

information.

Topics Covered

security advisory denial of service Ubuntu moderate severity dnsmasq

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  dnsmasq-base                    2.72-3ubuntu0.1

Ubuntu 14.10:
  dnsmasq-base                    2.71-1ubuntu0.1

Ubuntu 14.04 LTS:
  dnsmasq-base                    2.68-1ubuntu0.1

Ubuntu 12.04 LTS:
  dnsmasq                         2.59-4ubuntu0.2
  dnsmasq-base                    2.59-4ubuntu0.2
  dnsmasq-utils                   2.59-4ubuntu0.2

After a standard system update you need to reboot your computer to make
all the necessary changes.