Most recent entries from all

ALSA-2021:4153 — Moderate: dnsmasq security and bug fix update

Affected: AlmaLinux:8: dnsmasq, AlmaLinux:8: dnsmasq-utils

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: fixed outgoing port used when --server is used with an interface name (CVE-2021-3448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-04028

Withdrawn: BELL-CVE-2021-3448 — CVE-2021-3448 does not affect BellSoft software

Withdrawn by the publisher.

CLEANSTART-2026-EO77574 — Security fix for CVE-2021-3448 applied in: dnsmasq 2.85-r0

Affected: CleanStart: dnsmasq

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-262382

fkie_cve-2021-3448

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

GHSA-vvf4-c8p4-89v5

gsd-2021-3448

msrc_CVE-2021-3448 — A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network inter…

msrc_CVE-2021-3448

OESA-2021-1189 — dnsmasq security update

Affected: openEuler:20.03-LTS-SP1: dnsmasq

Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks. Security Fix(es): A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.(CVE-2021-3448)

openSUSE-SU-2021:1426-1 — Security update for dnsmasq

Security update for dnsmasq

SUSE-SU-2021:3530-1 — Security update for dnsmasq

Security update for dnsmasq

UBUNTU-CVE-2021-3448

Affected: Ubuntu:Pro:14.04:LTS: dnsmasq, Ubuntu:Pro:16.04:LTS: dnsmasq, Ubuntu:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq

WID-SEC-W-2022-1335 — Xerox FreeFlow Print Server: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.