Dnsmasq Multiple Remote Denial of Service Vulnerabilities
BID:57458
Info
Dnsmasq Multiple Remote Denial of Service Vulnerabilities
| Bugtraq ID: | 57458 |
| Class: | Design Error |
| CVE: |
CVE-2013-0198 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2013 12:00AM |
| Updated: | Apr 13 2015 08:39PM |
| Credit: | Josh Stone |
| Vulnerable: |
Gentoo Linux Dnsmasq Dnsmasq 2.29 Dnsmasq Dnsmasq 2.22 Dnsmasq Dnsmasq 2.21 Dnsmasq Dnsmasq 2.20 Dnsmasq Dnsmasq 2.19 Dnsmasq Dnsmasq 2.18 Dnsmasq Dnsmasq 2.17 Dnsmasq Dnsmasq 2.16 Dnsmasq Dnsmasq 2.15 Dnsmasq Dnsmasq 2.14 Dnsmasq Dnsmasq 2.13 Dnsmasq Dnsmasq 2.12 Dnsmasq Dnsmasq 2.11 Dnsmasq Dnsmasq 2.50 Dnsmasq Dnsmasq 2.49 Dnsmasq Dnsmasq 2.48 Dnsmasq Dnsmasq 2.47 Dnsmasq Dnsmasq 2.46 Dnsmasq Dnsmasq 2.45 Dnsmasq Dnsmasq 2.44 Dnsmasq Dnsmasq 2.43 Dnsmasq Dnsmasq 2.42 Dnsmasq Dnsmasq 2.41 Dnsmasq Dnsmasq 2.40 Dnsmasq Dnsmasq 2.35 Dnsmasq Dnsmasq 2.30 |
| Not Vulnerable: | |
Discussion
Dnsmasq Multiple Remote Denial of Service Vulnerabilities
Dnsmasq is prone to multiple denial-of-service vulnerabilities.
An attacker can exploit these issues to cause denial-of-service conditions through a large stream of spoofed DNS queries.
Dnsmasq versions 2.62 and prior are vulnerable.
Dnsmasq is prone to multiple denial-of-service vulnerabilities.
An attacker can exploit these issues to cause denial-of-service conditions through a large stream of spoofed DNS queries.
Dnsmasq versions 2.62 and prior are vulnerable.
Exploit / POC
Dnsmasq Multiple Remote Denial of Service Vulnerabilities
Attackers can use readily available networking tools to exploit these issues.
Attackers can use readily available networking tools to exploit these issues.
Solution / Fix
Dnsmasq Multiple Remote Denial of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Mandriva Business Server 1 X86 64
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Mandriva Business Server 1 X86 64
-
Mandriva dnsmasq-2.63-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva dnsmasq-base-2.63-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
Dnsmasq Multiple Remote Denial of Service Vulnerabilities
References:
References:
- Bug 894486 - dnsmasq: Incomplete fix for the CVE-2012-3411 issue (Red Hat)
- Dnsmasq Home Page (Dnsmasq)