Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-25681

Fixed in a distro release EPSS 84%

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Published 2021-01-20 · CVE record · OSV

Products: thekelleys dnsmasq, fedoraproject fedora, debian_linux

Distro releases

ReleasePackageFixed in
Alpine 3.10dnsmasq2.83-r0
Alpine 3.11dnsmasq2.83-r0
Alpine 3.12dnsmasq2.83-r0
Alpine 3.13dnsmasq2.83-r0
Alpine 3.14dnsmasq2.83-r0
Alpine 3.15dnsmasq2.83-r0
Alpine 3.16dnsmasq2.83-r0
Alpine 3.17dnsmasq2.83-r0
Alpine 3.18dnsmasq2.83-r0
Alpine 3.19dnsmasq2.83-r0
Alpine 3.20dnsmasq2.83-r0
Alpine 3.21dnsmasq2.83-r0
Alpine 3.22dnsmasq2.83-r0
Alpine 3.23dnsmasq2.83-r0
Alpine 3.24dnsmasq2.83-r0
Arch Linuxdnsmasq2.83-1
Debian 10dnsmasq2.80-1+deb10u1
Debian 12dnsmasq2.83-1
Debian 13dnsmasq2.83-1
Debian 14dnsmasq2.83-1
Debian 9dnsmasq2.76-5+deb9u3
Red Hat Enterprise Linux 8dnsmasq0:2.79-13.el8_3.1
Red Hat Enterprise Linux 8dnsmasq-debuginfo0:2.79-13.el8_3.1
Red Hat Enterprise Linux 8dnsmasq-debugsource0:2.79-13.el8_3.1
Red Hat Enterprise Linux 8dnsmasq-utils0:2.79-13.el8_3.1
Red Hat Enterprise Linux 8dnsmasq-utils-debuginfo0:2.79-13.el8_3.1
Red Hat rhel eus 8.1dnsmasq0:2.79-6.el8_1.1
Red Hat rhel eus 8.1dnsmasq-debuginfo0:2.79-6.el8_1.1
Red Hat rhel eus 8.1dnsmasq-debugsource0:2.79-6.el8_1.1
Red Hat rhel eus 8.1dnsmasq-utils0:2.79-6.el8_1.1
Red Hat rhel eus 8.1dnsmasq-utils-debuginfo0:2.79-6.el8_1.1
Red Hat rhel eus 8.2dnsmasq0:2.79-11.el8_2.2
Red Hat rhel eus 8.2dnsmasq-debuginfo0:2.79-11.el8_2.2
Red Hat rhel eus 8.2dnsmasq-debugsource0:2.79-11.el8_2.2
Red Hat rhel eus 8.2dnsmasq-utils0:2.79-11.el8_2.2
Red Hat rhel eus 8.2dnsmasq-utils-debuginfo0:2.79-11.el8_2.2
SUSE Enterprise Storage 5dnsmasq2.78-18.15.1
SUSE HPE Helion OpenStack 8dnsmasq2.78-18.15.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSdnsmasq2.78-3.11.1
SUSE Linux Enterprise High Performance Computing 15-LTSSdnsmasq2.78-3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP1dnsmasq2.78-7.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP2dnsmasq2.78-7.6.1
SUSE Linux Enterprise Point of Sale 11 SP3dnsmasq2.78-0.16.14.1
SUSE Linux Enterprise Server 11 SP4-LTSSdnsmasq2.78-0.17.15.1
SUSE Linux Enterprise Server 12 SP2-BCLdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP2-LTSSdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP3-BCLdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP3-LTSSdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP4-LTSSdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP5dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 15-LTSSdnsmasq2.78-3.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server for SAP Applications 15dnsmasq2.78-3.11.1
SUSE OpenStack Cloud 7dnsmasq2.78-18.15.1
SUSE OpenStack Cloud 8dnsmasq2.78-18.15.1
SUSE OpenStack Cloud 9dnsmasq2.78-18.15.1
SUSE OpenStack Cloud Crowbar 8dnsmasq2.78-18.15.1
SUSE OpenStack Cloud Crowbar 9dnsmasq2.78-18.15.1
Ubuntu 16.04 LTSdnsmasq2.75-1ubuntu0.16.04.7
Ubuntu 18.04 LTSdnsmasq2.79-1ubuntu0.2
Ubuntu 20.04 LTSdnsmasq2.80-1.1ubuntu1.2
openSUSE Leap 15.1dnsmasq2.78-lp151.5.6.1
openSUSE Leap 15.2dnsmasq2.78-lp152.7.3.1
openSUSE Tumbleweeddnsmasq2.86-1.1