Synopsis: Moderate: dnsmasq security update
Advisory ID: SLSA-2021:0153-1
Issue Date: 2021-01-19
CVE Numbers: CVE-2020-25684
CVE-2020-25685
CVE-2020-25686
—
Security Fix(es):
* dnsmasq: loose address/port check in reply_query() makes forging replies
easier for an off-path attacker (CVE-2020-25684)
* dnsmasq: loose query name check in reply_query() makes forging replies
easier for an off-path attacker (CVE-2020-25685)
* dnsmasq: multiple queries forwarded for the same name makes forging
replies easier for an off-path attacker (CVE-2020-25686)
—
SL7
x86_64
dnsmasq-2.76-16.el7_9.1.x86_64.rpm
dnsmasq-debuginfo-2.76-16.el7_9.1.x86_64.rpm
dnsmasq-utils-2.76-16.el7_9.1.x86_64.rpm
– Scientific Linux Development Team
