Ubuntu.comUB:CVE-2023-28450CVE-2023-28450
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
68.1%
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0
UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day
2020.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | dnsmasq | < 2.79-1ubuntu0.7 | UNKNOWN |
| ubuntu | 20.04 | noarch | dnsmasq | < 2.80-1.1ubuntu1.7 | UNKNOWN |
| ubuntu | 22.04 | noarch | dnsmasq | < 2.86-1.1ubuntu0.3 | UNKNOWN |
| ubuntu | 22.10 | noarch | dnsmasq | < 2.86-1.1ubuntu2.1 | UNKNOWN |
| ubuntu | 23.10 | noarch | dnsmasq | < 2.90-0ubuntu0.23.10.1 | UNKNOWN |
| ubuntu | 24.04 | noarch | dnsmasq | < 2.90-1 | UNKNOWN |
| ubuntu | 14.04 | noarch | dnsmasq | < 2.68-1ubuntu0.2+esm2 | UNKNOWN |
| ubuntu | 16.04 | noarch | dnsmasq | < 2.79-1ubuntu0.16.04.1+esm2 | UNKNOWN |
References
capec.mitre.org/data/definitions/495.html
launchpad.net/bugs/cve/CVE-2023-28450
nvd.nist.gov/vuln/detail/CVE-2023-28450
security-tracker.debian.org/tracker/CVE-2023-28450
thekelleys.org.uk/dnsmasq/doc.html
thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob;f=CHANGELOG
ubuntu.com/security/notices/USN-6034-1
ubuntu.com/security/notices/USN-6657-1
ubuntu.com/security/notices/USN-6657-2
www.cve.org/CVERecord?id=CVE-2023-28450
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
68.1%