Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 16.04 LTS USN-4924-1 Moderate: Dnsmasq Denial Of Service

ubuntu
Calendar Grey April 22, 2021
Dist Ubuntu Esm H88
Ubuntu 16.04 LTS Dnsmasq patch addresses several vulnerabilities, enhancing overall stability and fortifying security measures.
Several security issues were fixed in Dnsmasq.

Summary

Several security issues were fixed in Dnsmasq.

Software Description:

- dnsmasq: Small caching DNS proxy and DHCP/TFTP server

Details:

It was discovered that Dnsmasq incorrectly handled certain wildcard

synthesized NSEC records. A remote attacker could possibly use this issue

to prove the non-existence of hostnames that actually exist.

(CVE-2017-15107)

It was discovered that Dnsmasq incorrectly handled certain large DNS

packets. A remote attacker could possibly use this issue to cause Dnsmasq

to crash, resulting in a denial of service. (CVE-2019-14513)

Topics%20covered

Topics Covered

security advisory moderate denial of service Ubuntu moderate severity DNS issues dnsmasq Ubuntu 16.04 LTS Dnsmasq DNS handling

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  dnsmasq                         2.75-1ubuntu0.16.04.10
  dnsmasq-base                    2.75-1ubuntu0.16.04.10
  dnsmasq-utils                   2.75-1ubuntu0.16.04.10

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-4924-1

CVE-2017-15107, CVE-2019-14513

April 22, 2021

Topics%20covered

Topics Covered

security advisory moderate denial of service Ubuntu moderate severity DNS issues dnsmasq Ubuntu 16.04 LTS Dnsmasq DNS handling

Package Information

https://launchpad.net/ubuntu/+source/dnsmasq/2.75-1ubuntu0.16.04.10

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here