ALT-PU-2023-1523

Высокий

ALT-PU-2023-1523: package dnsmasq update to version 2.89-alt2

Источник

errata.altlinux.org

Дата публикации

28.03.2023

Дата обновления

28.03.2023

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades dnsmasq to version 2.89-alt2.

Устраненные уязвимости2

BDU:2023-02265

Высокий 7.5

Дата публикации: 27.04.2023

Уязвимость DNS-сервера Dnsmasq. связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS 3.1

Высокий 7.5

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 6.8

AV:N/AC:L/Au:S/C:N/I:N/A:C

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: None
Availability: Complete

Ссылки

BDU:2023-02265 https://bdu.fstec.ru/vul/2023-02265

Ссылки1

ALT-PU-2023-1523 https://errata.altlinux.org/ALT-PU-2023-1523

Связанные уязвимости

CVE-2023-28450

CVSS3: 7.5

ubuntu

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

CVE-2023-28450

CVSS3: 7.5

redhat

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

CVE-2023-28450

CVSS3: 7.5

nvd

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

CVE-2023-28450

CVSS3: 7.5

msrc

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

CVE-2023-28450

CVSS3: 7.5

debian

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum ED ...