Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 16.04 LTS USN-3009-1 Addresses Dnsmasq DoS Vulnerability

ubuntu
Calendar Grey June 20, 2016
Scroller Ubuntu
Recent security flaw identified in Dnsmasq affecting various Ubuntu versions, posing risks of service disruptions. Instructions for patching provided.
Dnsmasq could be made to crash if it received specially crafted network traffic.

Summary

Dnsmasq could be made to crash if it received specially crafted network

traffic.

Software Description:

- dnsmasq: Small caching DNS proxy and DHCP/TFTP server

Details:

Edwin Török discovered that Dnsmasq incorrectly handled certain CNAME

responses. A remote attacker could use this issue to cause Dnsmasq to

crash, resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu networking issue dnsmasq

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  dnsmasq                         2.75-1ubuntu0.16.04.1
  dnsmasq-base                    2.75-1ubuntu0.16.04.1
  dnsmasq-utils                   2.75-1ubuntu0.16.04.1

Ubuntu 15.10:
  dnsmasq                         2.75-1ubuntu0.15.10.1
  dnsmasq-base                    2.75-1ubuntu0.15.10.1
  dnsmasq-utils                   2.75-1ubuntu0.15.10.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3009-1

CVE-2015-8899

Severity
important
Lowest
Low
Medium
High
Critical

June 20, 2016

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu networking issue dnsmasq

Package Information

https://launchpad.net/ubuntu/+source/dnsmasq/2.75-1ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/dnsmasq/2.75-1ubuntu0.15.10.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.