Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 12.04 ESM: USN-3430-2 Moderate: Dnsmasq DoS Threat

ubuntu
Calendar Grey October 3, 2017
Scroller Ubuntu
Ubuntu Security Notice USN-3430-2 reveals dnsmasq vulnerabilities impacting system safety, urging users to update for protection against exploits
Several security issues were fixed in Dnsmasq.

Summary

Several security issues were fixed in Dnsmasq.

Software Description:

- dnsmasq: Small caching DNS proxy and DHCP/TFTP server

Details:

USN-3430-1 fixed several vulnerabilities in Dnsmasq. This update

provides the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 Felix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher

 discovered that Dnsmasq incorrectly handled DNS requests. A remote

 attacker could use this issue to cause Dnsmasq to crash, resulting in

 a denial of service, or possibly execute arbitrary code. 

 (CVE-2017-14491)

 Felix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher

 discovered that Dnsmasq incorrectly handled IPv6 router

 advertisements. A remote attacker could use this issue to cause

 Dnsmasq to crash, resulting in a denial of service, or possibly

 execute arbitrary code. (CVE-2017-14492)

 Felix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher

 discovered that Dn...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service remote code execution Ubuntu dnsmasq

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  dnsmasq                         2.59-4ubuntu0.3
  dnsmasq-base                    2.59-4ubuntu0.3
  dnsmasq-utils                   2.59-4ubuntu0.3

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3430-2

  https://ubuntu.com/security/notices/USN-3430-1

  CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494,

  CVE-2017-14495, CVE-2017-14496

Severity
important
Lowest
Low
Medium
High
Critical

October 03, 2017

Topics%20covered

Topics Covered

security advisory denial of service remote code execution Ubuntu dnsmasq

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.