ALT-PU-2023-1548

Высокий

ALT-PU-2023-1548: package dnsmasq update to version 2.89-alt2

Источник

errata.altlinux.org

Дата публикации

31.03.2023

Дата обновления

31.03.2023

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades dnsmasq to version 2.89-alt2.

Устраненные уязвимости2

BDU:2023-02265

Высокий 7.5

Дата публикации: 27.04.2023

Уязвимость DNS-сервера Dnsmasq. связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS 3.1

Высокий 7.5

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 6.8

AV:N/AC:L/Au:S/C:N/I:N/A:C

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: None
Availability: Complete

Ссылки

BDU:2023-02265 https://bdu.fstec.ru/vul/2023-02265

Ссылки1

ALT-PU-2023-1548 https://errata.altlinux.org/ALT-PU-2023-1548

Связанные уязвимости

CVE-2023-28450

CVSS3: 7.5

ubuntu

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

CVE-2023-28450

CVSS3: 7.5

redhat

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

CVE-2023-28450

CVSS3: 7.5

nvd

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

CVE-2023-28450

CVSS3: 7.5

msrc

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

CVE-2023-28450

CVSS3: 7.5

debian

больше 3 лет назад

An issue was discovered in Dnsmasq before 2.90. The default maximum ED ...