Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:3877
HistoryJun 13, 2024 - 2:17 a.m.

(RHSA-2024:3877) Important: dnsmasq security update

2024-06-1302:17:25
access.redhat.com
7
rhsa-2024-3877
dnsmasq
security update
cpu consumption
dns
dhcp
bind9
cve-2023-50387
cve-2023-50868

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

JSON

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

  • bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)

  • bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64lednsmasq-debugsource< 2.79-15.el8_4.2dnsmasq-debugsource-2.79-15.el8_4.2.ppc64le.rpm
RedHat8x86_64dnsmasq-debuginfo< 2.79-15.el8_4.2dnsmasq-debuginfo-2.79-15.el8_4.2.x86_64.rpm
RedHat8x86_64dnsmasq-utils< 2.79-15.el8_4.2dnsmasq-utils-2.79-15.el8_4.2.x86_64.rpm
RedHat8x86_64dnsmasq-utils-debuginfo< 2.79-15.el8_4.2dnsmasq-utils-debuginfo-2.79-15.el8_4.2.x86_64.rpm
RedHat8ppc64lednsmasq< 2.79-15.el8_4.2dnsmasq-2.79-15.el8_4.2.ppc64le.rpm
RedHat8ppc64lednsmasq-utils< 2.79-15.el8_4.2dnsmasq-utils-2.79-15.el8_4.2.ppc64le.rpm
RedHat8x86_64dnsmasq< 2.79-15.el8_4.2dnsmasq-2.79-15.el8_4.2.x86_64.rpm
RedHat8x86_64dnsmasq-debugsource< 2.79-15.el8_4.2dnsmasq-debugsource-2.79-15.el8_4.2.x86_64.rpm
RedHat8ppc64lednsmasq-utils-debuginfo< 2.79-15.el8_4.2dnsmasq-utils-debuginfo-2.79-15.el8_4.2.ppc64le.rpm
RedHat8ppc64lednsmasq-debuginfo< 2.79-15.el8_4.2dnsmasq-debuginfo-2.79-15.el8_4.2.ppc64le.rpm

Related

osv 15
debian 4
cloudlinux 1
nessus 81
openvas 55
redhat 11
fedora 6
ubuntu 2
oraclelinux 6
rocky 2
almalinux 4
akamaiblog 1
redos 1
amazon 2
freebsd_advisory 1
mageia 2
freebsd 2
slackware 1
cloudfoundry 1
photon 1
osv
osv
Important: dnsmasq security update
2024-03-14 00:00:00
Important: dnsmasq security update
2024-03-27 04:34:32
unbound - security update
2024-02-14 00:00:00
debian
debian
[SECURITY] [DSA 5626-1] pdns-recursor security update
2024-02-18 16:35:24
[SECURITY] [DLA 3816-1] bind9 security update
2024-05-17 18:05:06
[SECURITY] [DSA 5620-1] unbound security update
2024-02-14 06:49:32
cloudlinux
cloudlinux
bind: Fix of 2 CVEs
2024-03-14 17:26:05
nessus
nessus
CentOS 8 : unbound (CESA-2024:0965)
2024-02-25 00:00:00
Slackware Linux 15.0 / current dnsmasq Multiple Vulnerabilities (SSA:2024-044-02)
2024-02-14 00:00:00
RHEL 9 : unbound (RHSA-2024:0981)
2024-02-26 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-1923)
2024-07-16 00:00:00
Fedora: Security Advisory for dnsmasq (FEDORA-2024-e00eceb11c)
2024-02-29 00:00:00
ISC BIND Multiple DoS Vulnerabilities (CVE-2023-50387, CVE-2023-50868, KeyTrap) - Windows
2024-02-14 00:00:00
redhat
redhat
(RHSA-2024:1522) Important: dnsmasq security update
2024-03-26 12:26:32
(RHSA-2024:0965) Important: unbound security update
2024-02-26 00:56:26
(RHSA-2024:3929) Important: dnsmasq security update
2024-06-13 14:48:36
fedora
fedora
[SECURITY] Fedora 38 Update: pdns-recursor-4.8.6-1.fc38
2024-02-23 01:32:18
[SECURITY] Fedora 39 Update: unbound-1.19.1-2.fc39
2024-02-18 00:55:50
[SECURITY] Fedora 38 Update: dnsmasq-2.90-1.fc38
2024-02-29 01:59:13
ubuntu
ubuntu
Unbound vulnerabilities
2024-02-28 00:00:00
Bind vulnerabilities
2024-04-09 00:00:00
oraclelinux
oraclelinux
unbound security update
2024-02-28 00:00:00
unbound security update
2024-02-28 00:00:00
dnsmasq security update
2024-03-15 00:00:00
rocky
rocky
dnsmasq security update
2024-03-27 04:34:32
bind and dhcp security update
2024-06-14 13:59:16
almalinux
almalinux
Important: dnsmasq security update
2024-03-14 00:00:00
Important: unbound security update
2024-02-26 00:00:00
Important: unbound security update
2024-02-26 00:00:00
akamaiblog
akamaiblog
CVE-2023-50387 and CVE-2023-50868 ? DNS Exploit KeyTrap Posed Major Internet Threat
2024-02-15 07:00:00
redos
redos
ROS-20240410-09
2024-04-10 00:00:00
amazon
amazon
Important: bind
2024-04-24 22:15:00
Important: unbound
2024-02-29 10:03:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-24:03.unbound
2024-03-28 00:00:00
mageia
mageia
Updated dnsmasq packages fix security vulnerabilities
2024-02-18 04:49:05
Updated unbound packages fix security vulnerabilities
2024-02-17 03:55:07
freebsd
freebsd
powerdns-recursor -- Multiple Vulnerabilities
2024-02-14 00:00:00
DNSSEC validators -- denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilities
2024-02-06 00:00:00
slackware
slackware
[slackware-security] dnsmasq
2024-02-14 04:22:19
cloudfoundry
cloudfoundry
USN-6665-1: Unbound vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0726
2024-02-14 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

JSON
Related for RHSA-2024:3877
osv15debian4cloudlinux1nessus81openvas55redhat11fedora6ubuntu2oraclelinux6rocky2almalinux4akamaiblog1redos1amazon2freebsd_advisory1mageia2freebsd2slackware1cloudfoundry1photon1