PT-2023-11547 · Dnsmasq · Dnsmasq

Published 2023-08-22 · Updated 2023-08-23 · CVE-2020-20145

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Dnsmasq versions up to and including 2.80

Description An issue was discovered in the /src/helper.c file of Dnsmasq, allowing attackers to cause a denial of service via the create helper function.

Recommendations For Dnsmasq versions up to and including 2.80, as a temporary workaround, consider disabling the create helper function until a patch is available.

Related Identifiers

CVE-2020-20145

Affected Products

Dnsmasq

References · 6

• https://osv.dev/vulnerability/UBUNTU-CVE-2020-20145 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-20145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-20145 · Security Note
• https://ubuntu.com/security/CVE-2020-20145 · Vendor Advisory
• http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=69bc94779c2f035a9fffdb5327a54c3aeca73ed5 · Note
• https://t.me/cibsecurity/68997 · Telegram Post