Lucene search
AmazonALAS2-2023-2069HistoryJun 05, 2023 - 4:39 p.m.
Medium: dnsmasq
2023-06-0516:39:00
alas.aws.amazon.com
22
dnsmasq
update
edns.0
udp
packet size
issue
security
cve-2023-28450
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.1%
Issue Overview:
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. (CVE-2023-28450)
Affected Packages:
dnsmasq
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update dnsmasq to update your system.
New Packages:
aarch64:
dnsmasq-2.76-16.amzn2.1.4.aarch64
dnsmasq-utils-2.76-16.amzn2.1.4.aarch64
dnsmasq-debuginfo-2.76-16.amzn2.1.4.aarch64
i686:
dnsmasq-2.76-16.amzn2.1.4.i686
dnsmasq-utils-2.76-16.amzn2.1.4.i686
dnsmasq-debuginfo-2.76-16.amzn2.1.4.i686
src:
dnsmasq-2.76-16.amzn2.1.4.src
x86_64:
dnsmasq-2.76-16.amzn2.1.4.x86_64
dnsmasq-utils-2.76-16.amzn2.1.4.x86_64
dnsmasq-debuginfo-2.76-16.amzn2.1.4.x86_64
Additional References
Red Hat: CVE-2023-28450
Mitre: CVE-2023-28450
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 2 | aarch64 | dnsmasq | < 2.76-16.amzn2.1.4 | dnsmasq-2.76-16.amzn2.1.4.aarch64.rpm |
| Amazon Linux | 2 | aarch64 | dnsmasq-utils | < 2.76-16.amzn2.1.4 | dnsmasq-utils-2.76-16.amzn2.1.4.aarch64.rpm |
| Amazon Linux | 2 | aarch64 | dnsmasq-debuginfo | < 2.76-16.amzn2.1.4 | dnsmasq-debuginfo-2.76-16.amzn2.1.4.aarch64.rpm |
| Amazon Linux | 2 | i686 | dnsmasq | < 2.76-16.amzn2.1.4 | dnsmasq-2.76-16.amzn2.1.4.i686.rpm |
| Amazon Linux | 2 | i686 | dnsmasq-utils | < 2.76-16.amzn2.1.4 | dnsmasq-utils-2.76-16.amzn2.1.4.i686.rpm |
| Amazon Linux | 2 | i686 | dnsmasq-debuginfo | < 2.76-16.amzn2.1.4 | dnsmasq-debuginfo-2.76-16.amzn2.1.4.i686.rpm |
| Amazon Linux | 2 | x86_64 | dnsmasq | < 2.76-16.amzn2.1.4 | dnsmasq-2.76-16.amzn2.1.4.x86_64.rpm |
| Amazon Linux | 2 | x86_64 | dnsmasq-utils | < 2.76-16.amzn2.1.4 | dnsmasq-utils-2.76-16.amzn2.1.4.x86_64.rpm |
| Amazon Linux | 2 | x86_64 | dnsmasq-debuginfo | < 2.76-16.amzn2.1.4 | dnsmasq-debuginfo-2.76-16.amzn2.1.4.x86_64.rpm |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0153)
2023-04-24 00:00:00
Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2023-2119)
2023-06-07 00:00:00
Fedora: Security Advisory for dnsmasq (FEDORA-2023-828bf01834)
2023-04-07 00:00:00
nessus
nessus
EulerOS Virtualization 2.11.1 : dnsmasq (EulerOS-SA-2023-2067)
2023-06-07 00:00:00
EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2023-1799)
2023-05-09 00:00:00
EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2023-1817)
2023-05-09 00:00:00
oraclelinux
oraclelinux
dnsmasq security and bug fix update
2023-11-17 00:00:00
dnsmasq security and bug fix update
2023-11-11 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-28450 affecting package dnsmasq for versions less than 2.89-2
2023-04-16 00:48:11
CVE-2023-28450 affecting package dnsmasq 2.85-1
2023-04-07 04:59:06
almalinux
almalinux
Moderate: dnsmasq security and bug fix update
2023-11-14 00:00:00
Moderate: dnsmasq security and bug fix update
2023-11-07 00:00:00
alpinelinux
alpinelinux
CVE-2023-28450
2023-03-15 21:15:09
fedora
fedora
[SECURITY] Fedora 38 Update: dnsmasq-2.89-2.fc38
2023-04-17 01:21:38
[SECURITY] Fedora 37 Update: dnsmasq-2.89-2.fc37
2023-04-06 01:57:03
prion
prion
Design/Logic Flaw
2023-03-15 21:15:00
osv
osv
dnsmasq vulnerability
2023-04-20 12:57:33
CVE-2023-28450
2023-03-15 21:15:09
Moderate: dnsmasq security and bug fix update
2023-11-14 00:00:00
redhat
redhat
(RHSA-2023:7046) Moderate: dnsmasq security and bug fix update
2023-11-14 08:43:42
(RHSA-2024:4052) Moderate: dnsmasq security update
2024-06-23 22:35:40
(RHSA-2023:6524) Moderate: dnsmasq security and bug fix update
2023-11-07 06:07:40
amazon
amazon
Medium: dnsmasq
2023-06-05 16:39:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2283
2023-10-24 14:20:01
mageia
mageia
Updated dnsmasq packages fix security vulnerability
2023-04-24 03:20:26
redos
redos
ROS-20230419-02
2023-04-19 00:00:00
redhatcve
redhatcve
CVE-2023-28450
2023-03-16 09:42:25
debiancve
debiancve
CVE-2023-28450
2023-03-15 21:15:09
ubuntucve
ubuntucve
CVE-2023-28450
2023-03-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package dnsmasq version 2.89-alt2
2023-03-31 00:00:00
cvelist
cvelist
CVE-2023-28450
2023-03-15 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-05-02 07:04:30
nvd
nvd
CVE-2023-28450
2023-03-15 21:15:09
ubuntu
ubuntu
Dnsmasq vulnerability
2023-04-20 00:00:00
Dnsmasq vulnerabilities
2024-02-26 00:00:00
Dnsmasq vulnerabilities
2024-04-24 00:00:00
githubexploit
githubexploit
Exploit for CVE-2023-28450
2023-04-05 05:33:09
cve
cve
CVE-2023-28450
2023-03-15 21:15:09
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0563
2023-04-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0370
2023-04-05 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0041
2023-06-29 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.1%
Related for ALAS2-2023-2069