PT-2021-3539 · Dnsmasq+6 · Dnsmasq+6
Published
2021-01-19
·
Updated
2024-06-15
·
CVE-2020-25685
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
dnsmasq versions prior to 2.83
Description
A flaw in dnsmasq allows an off-path attacker to forge a reply and get it accepted by dnsmasq due to the use of a weak hash (CRC32 or SHA-1) when checking forwarded queries in the
reply query() function. This could be abused to perform a DNS Cache Poisoning attack, substantially reducing the number of attempts needed to forge a reply. The highest threat from this issue is to data integrity.Recommendations
For dnsmasq versions prior to 2.83, update to version 2.83 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
reply query() function in forward.c to minimize the risk of exploitation. Additionally, avoid using dnsmasq as a DNS server unless necessary, and ensure that any optional configurations allowing the use of the EOS switch as a DNS server are carefully evaluated and secured.Fix
Inadequate Encryption Strength
Improperly Implemented Security Check for Standard
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linuxmint
Red Hat
Suse
Ubuntu
Dnsmasq