Lucene search

K

ROSA LABROSA-SA-2023-2283

HistoryOct 24, 2023 - 2:20 p.m.

Advisory ROSA-SA-2023-2283

2023-10-2414:20:01

ROSA LAB

abf.rosalinux.ru

7

dnsmasq

vulnerability

resource allocation

remote attackers

denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.1%

software: dnsmasq 2.87
WASP: ROSA-CHROME

package_evr_string: dnsmasq-2.87-2.src.rpm

CVE-ID: CVE-2023-28450
BDU-ID: 2023-02265
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the Dnsmasq DNS server is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service
CVE-STATUS: Resolved
CVE-REV: To close, run the command: sudo dnf update dnsmasq

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchdnsmasq< 2.87UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.1%

Related for ROSA-SA-2023-2283