[ GLSA 202101-17 ] Dnsmasq

[GLSA]

Gentoo Linux Security Advisory

Title: Dnsmasq: Multiple vulnerabilities (GLSA 202101-17)
Severity: normal
Exploitable: local, remote
Date: 2021-01-22
Bug(s): #766126
ID: 202101-17

Synopsis

Multiple vulnerabilities have been found in Dnsmasq, the worst of
which may allow remote attackers to execute arbitrary code.


Background

Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP
server.


Affected Packages

Package: net-dns/dnsmasq
Vulnerable: < 2.83
Unaffected: >= 2.83
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Dnsmasq. Please review
the references below for details.


Impact

An attacker, by sending specially crafted DNS replies, could possibly
execute arbitrary code with the privileges of the process, perform a
cache poisoning attack or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Dnsmasq users should upgrade to the latest version: