PT-2023-11547 · Dnsmasq · Dnsmasq

Publicado 2023-08-22 · Atualizado 2023-08-23 · CVE-2020-20145

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Dnsmasq versions up to and including 2.80

Description An issue was discovered in the /src/helper.c file of Dnsmasq, allowing attackers to cause a denial of service via the create helper function.

Recommendations For Dnsmasq versions up to and including 2.80, as a temporary workaround, consider disabling the create helper function until a patch is available.

Identificadores relacionados

CVE-2020-20145

Produtos afetados

Dnsmasq

Referências · 6

• https://osv.dev/vulnerability/UBUNTU-CVE-2020-20145 · Aviso do Fabricante
• http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=69bc94779c2f035a9fffdb5327a54c3aeca73ed5 · Nota
• https://cve.org/CVERecord?id=CVE-2020-20145 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2020-20145 · Nota de Segurança
• https://ubuntu.com/security/CVE-2020-20145 · Aviso do Fabricante
• https://t.me/cibsecurity/68997 · Publicação no Telegram