Insufficient verification of data authenticity in Dnsmasq - CVE-2021-3448

Vulnerability identifier: #VU52065

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3448

CWE-ID: CWE-345

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a DNS Cache Poisoning attack.

The vulnerability exists due to dnsmasq relies only on transmission ID when processing DNS queries and uses the same port for outgoing requests, when configured to given network interface. A remote attacker can guess the random transmission ID to forge a reply and get it accepted by dnsmasq.As a result, an attacker can perform a DNS Cache Poisoning attack.

Dnsmasq
Gentoo Linux
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Slackware Linux
Ubuntu
openEuler
Fedora
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
dnsmasq (Ubuntu package)
dnsmasq-utils (Ubuntu package)
dnsmasq-base (Ubuntu package)
dnsmasq (Red Hat package)
dnsmasq-utils
dnsmasq
dnsmasq-debugsource
dnsmasq-help
dnsmasq-debuginfo
EMC ECS

Install updates from vendor's website.

Dnsmasq - update to 2.85
dnsmasq (Ubuntu package) - addressed in versions 2.79-1ubuntu0.4, 2.80-1.1ubuntu1.4, 2.82-1ubuntu1.3, 2.84-1ubuntu2.1, 2.791ubuntu0.16.04.1+esm1
dnsmasq-utils (Ubuntu package) - addressed in versions 2.79-1ubuntu0.4, 2.80-1.1ubuntu1.4, 2.82-1ubuntu1.3, 2.84-1ubuntu2.1, 2.791ubuntu0.16.04.1+esm1
dnsmasq-base (Ubuntu package) - addressed in versions 2.79-1ubuntu0.4, 2.80-1.1ubuntu1.4, 2.82-1ubuntu1.3, 2.84-1ubuntu2.1, 2.791ubuntu0.16.04.1+esm1
dnsmasq (Red Hat package) - update to 2.79-19.el8
dnsmasq-utils - update to 2.79-32.0.1
dnsmasq - update to 2.79-32.0.1
dnsmasq - update to 2.82-8
dnsmasq-debugsource - update to 2.82-8
dnsmasq-help - update to 2.82-8
dnsmasq-debuginfo - update to 2.82-8
dnsmasq - addressed in versions 2.85-1.fc32, 2.85-1.fc33, 2.85-1.fc34
EMC ECS - update to 3.7.0.3

• https://bugzilla.redhat.com/show_bug.cgi?id=1939368

• DNS Cache Poisoning attack in dnsmasq
• Slackware Linux update for dnsmasq
• Gentoo update for Dnsmasq
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Ubuntu update for dnsmasq
• Ubuntu update for dnsmasq
• Multiple vulnerabilities in Dell ECS
• Red Hat Enterprise Linux 8 update for dnsmasq
• openEuler 20.03 LTS SP1 update for dnsmasq
• Fedora 34 update for dnsmasq
• Fedora 33 update for dnsmasq
• Fedora 32 update for dnsmasq
• Anolis OS update for dnsmasq