Homepage

Improperly Implemented Security Check for Standard The advisory has been revoked - it doesn't affect any version of package dnsmasq  (opens in a new tab)

Threat Intelligence

EPSS
2.28% (83rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1404-DNSMASQ-1618508
  • published23 Mar 2021
  • disclosed8 Apr 2021
Report a new vulnerability Found a mistake?

Introduced: 23 Mar 2021

CVE-2021-3448  (opens in a new tab)
CWE-358  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:14.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream dnsmasq package and not the dnsmasq package as distributed by Ubuntu.

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

References