Home

CVE-2021-3448

Description

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

Risk Information

Base Score
4.0
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
EPSS Score
Exploitation Probability
0.042

Associated Vulnerability

VulnerabilityOS Platform
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq_2.79-1ubuntu0.4_all.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq_2.82-1ubuntu1.3_all.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq_2.84-1ubuntu2.1_all.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq_2.80-1.1ubuntu1.4_all.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-base_2.79-1ubuntu0.4_i386.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-base_2.79-1ubuntu0.4_amd64.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-base_2.82-1ubuntu1.3_amd64.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-base_2.84-1ubuntu2.1_amd64.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-base_2.80-1.1ubuntu1.4_amd64.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-utils_2.79-1ubuntu0.4_i386.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-utils_2.79-1ubuntu0.4_amd64.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-utils_2.82-1ubuntu1.3_amd64.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-utils_2.84-1ubuntu2.1_amd64.debLinux
Small caching DNS proxy and DHCP/TFTP server (USN-4976-1) dnsmasq-utils_2.80-1.1ubuntu1.4_amd64.debLinux
SUSE-SU-2022:1289-1(SUSE Linux Enterprise Server 12-SP5 ) dnsmasq-2.78-18.18.1.x86_64.rpmLinux
SUSE-SU-2022:1289-1(SUSE Linux Enterprise Server 12-SP5 ) dnsmasq-debuginfo-2.78-18.18.1.x86_64.rpmLinux
SUSE-SU-2022:1289-1(SUSE Linux Enterprise Server 12-SP5 ) dnsmasq-debugsource-2.78-18.18.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234