Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-25685

Fixed in a distro release EPSS 2%

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is compiled without DNSSEC, SHA-1 when it is) this flaw allows an off-path attacker to find several different domains all having the same hash, substantially reducing the number of attempts they would have to perform to forge a reply and get it accepted by dnsmasq. This is in contrast with RFC5452, which specifies that the query name is one of the attributes of a query that must be used to match a reply. This flaw could be abused to perform a DNS Cache Poisoning attack. If chained with CVE-2020-25684 the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity.

Published 2021-01-20 · CVE record · OSV

Products: thekelleys dnsmasq, fedoraproject fedora, debian_linux, arista eos

Distro releases

ReleasePackageFixed in
Alpine 3.10dnsmasq2.83-r0
Alpine 3.11dnsmasq2.83-r0
Alpine 3.12dnsmasq2.83-r0
Alpine 3.13dnsmasq2.83-r0
Alpine 3.14dnsmasq2.83-r0
Alpine 3.15dnsmasq2.83-r0
Alpine 3.16dnsmasq2.83-r0
Alpine 3.17dnsmasq2.83-r0
Alpine 3.18dnsmasq2.83-r0
Alpine 3.19dnsmasq2.83-r0
Alpine 3.20dnsmasq2.83-r0
Alpine 3.21dnsmasq2.83-r0
Alpine 3.22dnsmasq2.83-r0
Alpine 3.23dnsmasq2.83-r0
Alpine 3.24dnsmasq2.83-r0
Amazon Linux 2dnsmasq2.76-16.amzn2.1.1
Amazon Linux 2dnsmasq-utils2.76-16.amzn2.1.1
Arch Linuxdnsmasq2.83-1
Debian 10dnsmasq2.80-1+deb10u1
Debian 12dnsmasq2.83-1
Debian 13dnsmasq2.83-1
Debian 14dnsmasq2.83-1
Red Hat Enterprise Linux 7dnsmasq0:2.76-16.el7_9.1
Red Hat Enterprise Linux 7dnsmasq-debuginfo0:2.76-16.el7_9.1
Red Hat Enterprise Linux 7dnsmasq-utils0:2.76-16.el7_9.1
Red Hat Enterprise Linux 7redhat-virtualization-host0:4.3.13-20210127.0.el7_9
Red Hat Enterprise Linux 7redhat-virtualization-host-image-update0:4.3.13-20210127.0.el7_9
Red Hat Enterprise Linux 8dnsmasq0:2.79-13.el8_3.1
Red Hat Enterprise Linux 8dnsmasq-debuginfo0:2.79-13.el8_3.1
Red Hat Enterprise Linux 8dnsmasq-debugsource0:2.79-13.el8_3.1
Red Hat Enterprise Linux 8dnsmasq-utils0:2.79-13.el8_3.1
Red Hat Enterprise Linux 8dnsmasq-utils-debuginfo0:2.79-13.el8_3.1
Red Hat rhel aus 7.2dnsmasq0:2.66-14.el7_2.3
Red Hat rhel aus 7.2dnsmasq-debuginfo0:2.66-14.el7_2.3
Red Hat rhel aus 7.2dnsmasq-utils0:2.66-14.el7_2.3
Red Hat rhel aus 7.3dnsmasq0:2.66-21.el7_3.3
Red Hat rhel aus 7.3dnsmasq-debuginfo0:2.66-21.el7_3.3
Red Hat rhel aus 7.3dnsmasq-utils0:2.66-21.el7_3.3
Red Hat rhel aus 7.4dnsmasq0:2.76-2.el7_4.3
Red Hat rhel aus 7.4dnsmasq-debuginfo0:2.76-2.el7_4.3
Red Hat rhel aus 7.4dnsmasq-utils0:2.76-2.el7_4.3
Red Hat rhel e4s 7.4dnsmasq0:2.76-2.el7_4.3
Red Hat rhel e4s 7.4dnsmasq-debuginfo0:2.76-2.el7_4.3
Red Hat rhel e4s 7.4dnsmasq-utils0:2.76-2.el7_4.3
Red Hat rhel eus 7.6dnsmasq0:2.76-7.el7_6.2
Red Hat rhel eus 7.6dnsmasq-debuginfo0:2.76-7.el7_6.2
Red Hat rhel eus 7.6dnsmasq-utils0:2.76-7.el7_6.2
Red Hat rhel eus 7.7dnsmasq0:2.76-10.el7_7.2
Red Hat rhel eus 7.7dnsmasq-debuginfo0:2.76-10.el7_7.2
Red Hat rhel eus 7.7dnsmasq-utils0:2.76-10.el7_7.2
Red Hat rhel eus 8.1dnsmasq0:2.79-6.el8_1.1
Red Hat rhel eus 8.1dnsmasq-debuginfo0:2.79-6.el8_1.1
Red Hat rhel eus 8.1dnsmasq-debugsource0:2.79-6.el8_1.1
Red Hat rhel eus 8.1dnsmasq-utils0:2.79-6.el8_1.1
Red Hat rhel eus 8.1dnsmasq-utils-debuginfo0:2.79-6.el8_1.1
Red Hat rhel eus 8.2dnsmasq0:2.79-11.el8_2.2
Red Hat rhel eus 8.2dnsmasq-debuginfo0:2.79-11.el8_2.2
Red Hat rhel eus 8.2dnsmasq-debugsource0:2.79-11.el8_2.2
Red Hat rhel eus 8.2dnsmasq-utils0:2.79-11.el8_2.2
Red Hat rhel eus 8.2dnsmasq-utils-debuginfo0:2.79-11.el8_2.2
Red Hat rhel tus 7.4dnsmasq0:2.76-2.el7_4.3
Red Hat rhel tus 7.4dnsmasq-debuginfo0:2.76-2.el7_4.3
Red Hat rhel tus 7.4dnsmasq-utils0:2.76-2.el7_4.3
Red Hat rhev hypervisor 4.4redhat-virtualization-host0:4.4.4-20210201.0.el8_3
Red Hat rhev hypervisor 4.4redhat-virtualization-host-image-update0:4.4.4-20210201.0.el8_3
SUSE Enterprise Storage 5dnsmasq2.78-18.15.1
SUSE HPE Helion OpenStack 8dnsmasq2.78-18.15.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSdnsmasq2.78-3.11.1
SUSE Linux Enterprise High Performance Computing 15-LTSSdnsmasq2.78-3.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP1dnsmasq2.78-7.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP2dnsmasq2.78-7.6.1
SUSE Linux Enterprise Point of Sale 11 SP3dnsmasq2.78-0.16.14.1
SUSE Linux Enterprise Server 11 SP4-LTSSdnsmasq2.78-0.17.15.1
SUSE Linux Enterprise Server 12 SP2-BCLdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP2-LTSSdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP3-BCLdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP3-LTSSdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP4-LTSSdnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 12 SP5dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server 15-LTSSdnsmasq2.78-3.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5dnsmasq2.78-18.15.1
SUSE Linux Enterprise Server for SAP Applications 15dnsmasq2.78-3.11.1
SUSE OpenStack Cloud 7dnsmasq2.78-18.15.1
SUSE OpenStack Cloud 8dnsmasq2.78-18.15.1
SUSE OpenStack Cloud 9dnsmasq2.78-18.15.1
SUSE OpenStack Cloud Crowbar 8dnsmasq2.78-18.15.1
SUSE OpenStack Cloud Crowbar 9dnsmasq2.78-18.15.1
Ubuntu 16.04 LTSdnsmasq2.75-1ubuntu0.16.04.7
Ubuntu 18.04 LTSdnsmasq2.79-1ubuntu0.2
Ubuntu 20.04 LTSdnsmasq2.80-1.1ubuntu1.2
Ubuntu Pro 14.04 LTSdnsmasqno fix
openSUSE Leap 15.1dnsmasq2.78-lp151.5.6.1
openSUSE Leap 15.2dnsmasq2.78-lp152.7.3.1
openSUSE Tumbleweeddnsmasq2.86-1.1