rpm package
suse/dnsmasq&distro=SUSE Linux Enterprise Point of Sale 11 SP3
pkg:rpm/suse/dnsmasq&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3
Vulnerabilities (17)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-0934 | — | < 2.78-0.16.17.1 | 2.78-0.16.17.1 | Aug 29, 2022 | A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. | ||
| CVE-2021-3448 | — | < 2.78-0.16.17.1 | 2.78-0.16.17.1 | Apr 8, 2021 | A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the ran | ||
| CVE-2020-25686 | — | < 2.78-0.16.14.1 | 2.78-0.16.14.1 | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 | ||
| CVE-2020-25681 | — | < 2.78-0.16.14.1 | 2.78-0.16.14.1 | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to caus | ||
| CVE-2020-25687 | — | < 2.78-0.16.14.1 | 2.78-0.16.14.1 | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-al | ||
| CVE-2020-25682 | — | < 2.78-0.16.14.1 | 2.78-0.16.14.1 | Jan 20, 2021 | A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflo | ||
| CVE-2020-25683 | — | < 2.78-0.16.14.1 | 2.78-0.16.14.1 | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap | ||
| CVE-2020-25684 | — | < 2.78-0.16.14.1 | 2.78-0.16.14.1 | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex | ||
| CVE-2020-25685 | — | < 2.78-0.16.14.1 | 2.78-0.16.14.1 | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c | ||
| CVE-2017-14491 | Cri | 9.8 | < 2.78-0.16.5.1 | 2.78-0.16.5.1 | Oct 4, 2017 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. | |
| CVE-2017-14496 | Hig | 7.5 | < 2.78-0.16.5.1 | 2.78-0.16.5.1 | Oct 3, 2017 | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request. | |
| CVE-2017-14495 | Hig | 7.5 | < 2.78-0.16.5.1 | 2.78-0.16.5.1 | Oct 3, 2017 | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation. | |
| CVE-2017-14494 | Med | 5.9 | < 2.78-0.16.5.1 | 2.78-0.16.5.1 | Oct 3, 2017 | dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests. | |
| CVE-2017-14493 | Cri | 9.8 | < 2.78-0.16.5.1 | 2.78-0.16.5.1 | Oct 3, 2017 | Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request. | |
| CVE-2017-14492 | Cri | 9.8 | < 2.78-0.16.5.1 | 2.78-0.16.5.1 | Oct 3, 2017 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request. | |
| CVE-2015-8899 | Hig | 7.5 | < 2.78-0.16.5.1 | 2.78-0.16.5.1 | Jun 30, 2016 | Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally. | |
| CVE-2015-3294 | — | < 2.78-0.16.5.1 | 2.78-0.16.5.1 | May 8, 2015 | The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request. |
- CVE-2022-0934Aug 29, 2022affected < 2.78-0.16.17.1fixed 2.78-0.16.17.1
A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.
- CVE-2021-3448Apr 8, 2021affected < 2.78-0.16.17.1fixed 2.78-0.16.17.1
A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the ran
- CVE-2020-25686Jan 20, 2021affected < 2.78-0.16.14.1fixed 2.78-0.16.14.1
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150
- CVE-2020-25681Jan 20, 2021affected < 2.78-0.16.14.1fixed 2.78-0.16.14.1
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to caus
- CVE-2020-25687Jan 20, 2021affected < 2.78-0.16.14.1fixed 2.78-0.16.14.1
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-al
- CVE-2020-25682Jan 20, 2021affected < 2.78-0.16.14.1fixed 2.78-0.16.14.1
A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflo
- CVE-2020-25683Jan 20, 2021affected < 2.78-0.16.14.1fixed 2.78-0.16.14.1
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap
- CVE-2020-25684Jan 20, 2021affected < 2.78-0.16.14.1fixed 2.78-0.16.14.1
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex
- CVE-2020-25685Jan 20, 2021affected < 2.78-0.16.14.1fixed 2.78-0.16.14.1
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c
- affected < 2.78-0.16.5.1fixed 2.78-0.16.5.1
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
- affected < 2.78-0.16.5.1fixed 2.78-0.16.5.1
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
- affected < 2.78-0.16.5.1fixed 2.78-0.16.5.1
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
- affected < 2.78-0.16.5.1fixed 2.78-0.16.5.1
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
- affected < 2.78-0.16.5.1fixed 2.78-0.16.5.1
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
- affected < 2.78-0.16.5.1fixed 2.78-0.16.5.1
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
- affected < 2.78-0.16.5.1fixed 2.78-0.16.5.1
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
- CVE-2015-3294May 8, 2015affected < 2.78-0.16.5.1fixed 2.78-0.16.5.1
The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.