Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-3448

Fixed in a distro release EPSS 2%CVSS 4.0

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

Published 2021-04-08 · CVE record · OSV

Products: thekelleys dnsmasq, redhat enterprise_linux, fedoraproject fedora, oracle communications_cloud_native_core_network_function_cloud_native_environment

Distro releases

ReleasePackageFixed in
AlmaLinux 8dnsmasq2.79-19.el8
AlmaLinux 8dnsmasq-utils2.79-19.el8
Alpine 3.10dnsmasq2.85-r0
Alpine 3.11dnsmasq2.85-r0
Alpine 3.12dnsmasq2.85-r0
Alpine 3.13dnsmasq2.85-r0
Alpine 3.14dnsmasq2.85-r0
Alpine 3.15dnsmasq2.85-r0
Alpine 3.16dnsmasq2.85-r0
Alpine 3.17dnsmasq2.85-r0
Alpine 3.18dnsmasq2.85-r0
Alpine 3.19dnsmasq2.85-r0
Alpine 3.20dnsmasq2.85-r0
Alpine 3.21dnsmasq2.85-r0
Alpine 3.22dnsmasq2.85-r0
Alpine 3.23dnsmasq2.85-r0
Alpine 3.24dnsmasq2.85-r0
Arch Linuxdnsmasq2.85-1
Debian 12dnsmasq2.85-1
Debian 13dnsmasq2.85-1
Debian 14dnsmasq2.85-1
Red Hat Enterprise Linux 8dnsmasq0:2.79-19.el8
Red Hat Enterprise Linux 8dnsmasq-debuginfo0:2.79-19.el8
Red Hat Enterprise Linux 8dnsmasq-debugsource0:2.79-19.el8
Red Hat Enterprise Linux 8dnsmasq-utils0:2.79-19.el8
Red Hat Enterprise Linux 8dnsmasq-utils-debuginfo0:2.79-19.el8
Rocky Linux 8dnsmasq0:2.79-19.el8
SUSE Enterprise Storage 6dnsmasq2.86-7.14.1
SUSE HPE Helion OpenStack 8dnsmasq2.78-18.18.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSdnsmasq2.86-7.14.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSdnsmasq2.86-7.14.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSdnsmasq2.78-150000.3.14.1
SUSE Linux Enterprise High Performance Computing 15-LTSSdnsmasq2.78-150000.3.14.1
SUSE Linux Enterprise Micro 5.0dnsmasq2.86-7.14.1
SUSE Linux Enterprise Micro 5.1dnsmasq2.86-7.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP2dnsmasq2.86-7.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP3dnsmasq2.86-7.14.1
SUSE Linux Enterprise Point of Sale 11 SP3dnsmasq2.78-0.16.17.1
SUSE Linux Enterprise Server 11 SP4-LTSSdnsmasq2.78-0.17.18.1
SUSE Linux Enterprise Server 12 SP2-BCLdnsmasq2.78-18.18.1
SUSE Linux Enterprise Server 12 SP3-BCLdnsmasq2.78-18.18.1
SUSE Linux Enterprise Server 12 SP3-LTSSdnsmasq2.78-18.18.1
SUSE Linux Enterprise Server 12 SP4-LTSSdnsmasq2.78-18.18.1
SUSE Linux Enterprise Server 12 SP5dnsmasq2.78-18.18.1
SUSE Linux Enterprise Server 15 SP1-BCLdnsmasq2.86-7.14.1
SUSE Linux Enterprise Server 15 SP1-LTSSdnsmasq2.86-7.14.1
SUSE Linux Enterprise Server 15-LTSSdnsmasq2.78-150000.3.14.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3dnsmasq2.78-18.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4dnsmasq2.78-18.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5dnsmasq2.78-18.18.1
SUSE Linux Enterprise Server for SAP Applications 15dnsmasq2.78-150000.3.14.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1dnsmasq2.86-7.14.1
SUSE OpenStack Cloud 8dnsmasq2.78-18.18.1
SUSE OpenStack Cloud 9dnsmasq2.78-18.18.1
SUSE OpenStack Cloud Crowbar 8dnsmasq2.78-18.18.1
SUSE OpenStack Cloud Crowbar 9dnsmasq2.78-18.18.1
Ubuntu 18.04 LTSdnsmasq2.79-1ubuntu0.4
Ubuntu 20.04 LTSdnsmasq2.80-1.1ubuntu1.4
Ubuntu Pro 14.04 LTSdnsmasqno fix
Ubuntu Pro 16.04 LTSdnsmasq2.79-1ubuntu0.16.04.1+esm1
openSUSE Leap 15.2dnsmasq2.86-lp152.7.6.1
openSUSE Leap 15.3dnsmasq2.86-7.14.1
openSUSE Tumbleweeddnsmasq2.86-1.1