[ GLSA 202105-20 ] Dnsmasq

[GLSA]

Gentoo Linux Security Advisory

Title: Dnsmasq: DNS cache poisoning (GLSA 202105-20)
Severity: low
Exploitable: local, remote
Date: 2021-05-26
Bug(s): #782130
ID: 202105-20

Synopsis

Use of insufficient randomness in Dnsmasq might lead to DNS Cache
Poisoning.


Background

Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP
server.


Affected Packages

Package: net-dns/dnsmasq
Vulnerable: < 2.85
Unaffected: >= 2.85
Architectures: All supported architectures


Description

It was discovered that Dnsmasq, when configured with
--server=<address>@

Impact

An attacker, by sending malicious crafted DNS responses, could perform a
DNS Cache Poisoning attack.


Workaround

There is no known workaround at this time.

Resolution

All Dnsmasq users should upgrade to the latest version: