Описание
Recommended update for dnsmasq
This update provides dnsmasq version 2.71, which brings several fixes and enhancements. For a comprehensive list of changes, please refer to the package change log. (FATE#317370)
Список пакетов
SUSE Linux Enterprise Desktop 11 SP3
dnsmasq-2.71-0.11.1
SUSE Linux Enterprise Server 11 SP3
dnsmasq-2.71-0.11.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
dnsmasq-2.71-0.11.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3
dnsmasq-2.71-0.11.1
Ссылки
- Link for SUSE-SU-2015:1015-1
- E-Mail link for SUSE-SU-2015:1015-1
- SUSE Security Ratings
- SUSE Bug 776496
- SUSE Bug 883708
- SUSE Bug 923144
- SUSE Bug 928867
- SUSE CVE CVE-2015-3294 page
Описание
The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.
Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP3:dnsmasq-2.71-0.11.1
SUSE Linux Enterprise Server 11 SP3-TERADATA:dnsmasq-2.71-0.11.1
SUSE Linux Enterprise Server 11 SP3:dnsmasq-2.71-0.11.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3:dnsmasq-2.71-0.11.1
Ссылки
- CVE-2015-3294
- SUSE Bug 923144
- SUSE Bug 928867