Vulnerability Name:

CVE-2020-25683 (CCN-195080)

Assigned:2020-09-16
Published:2021-01-19
Updated:2021-03-26
Summary:A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rfc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in get_rdata() and cause a crash in dnsmasq, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS v3 Severity:5.9 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.2 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.2 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
5.9 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.2 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:7.1 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
5.4 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-122
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2020-25683

Source: CCN
Type: US-CERT VU#434904
Dnsmasq is vulnerable to memory corruption and cache poisoning

Source: CCN
Type: dnsmasq Web site
dnsmasq

Source: MISC
Type: Issue Tracking, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1882018

Source: XF
Type: UNKNOWN
dnsmasq-cve202025683-dos(195080)

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20210322 [SECURITY] [DLA 2604-1] dnsmasq security update

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2021-2e4c3d5a9d

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2021-84440e87ba

Source: CCN
Type: oss-sec Mailing List, Tue, 19 Jan 2021 13:30:49 +0100
Multiple CVEs in dnsmasq fixed in version 2.83

Source: GENTOO
Type: Third Party Advisory
GLSA-202101-17

Source: CCN
Type: Cisco Security Advisory cisco-sa-dnsmasq-dns-2021-c5mrdf3g
Multiple Vulnerabilities in dnsmasq DNS Forwarder Affecting Cisco Products: January 2021

Source: CCN
Type: ICSA-21-019-02
Dnsmasq by Simon Kelley

Source: DEBIAN
Type: Third Party Advisory
DSA-4844

Source: CCN
Type: JSOF web site
DNSpooq - Kaminsky attack is back!

Source: MISC
Type: Third Party Advisory
https://www.jsof-tech.com/disclosures/dnspooq/

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2020-25683

Vulnerable Configuration:Configuration 1:
  • cpe:/a:thekelleys:dnsmasq:*:*:*:*:*:*:*:* (Version < 2.83)

    • Configuration 2:
  • cpe:/o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  • OR cpe:/o:fedoraproject:fedora:33:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/a:redhat:enterprise_linux:8::appstream:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:thekelleys:dnsmasq:2.80:*:*:*:*:*:*:*
  • OR cpe:/a:thekelleys:dnsmasq:2.82:*:*:*:*:*:*:*
  • OR cpe:/a:thekelleys:dnsmasq:2.81:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:7484
    P
    		dnsmasq-2.86-150400.14.3 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:51564
    P
    		Security update for kubevirt stack (Important)
    2022-11-21
    oval:org.opensuse.security:def:3233
    P
    		libpng12-0-1.2.50-19.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3410
    P
    		xscreensaver-5.22-7.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:94522
    P
    		coreutils-8.32-150400.7.5 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:2909
    P
    		dnsmasq-2.86-150400.14.3 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:94539
    P
    		dnsmasq-2.86-150400.14.3 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:45
    P
    		dnsmasq-2.78-7.6.1 on GA media (Moderate)
    2022-06-13
    oval:org.opensuse.security:def:95237
    P
    		Security update for postgresql14 (Important)
    2022-06-01
    oval:org.opensuse.security:def:101950
    P
    		Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3) (Important)
    2022-03-30
    oval:org.opensuse.security:def:974
    P
    		Security update for openssl-1_1 (Important)
    2022-03-16
    oval:org.opensuse.security:def:112160
    P
    		dnsmasq-2.86-1.1 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:105696
    P
    		dnsmasq-2.86-1.1 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:100821
    P
    		dnsmasq-2.78-7.6.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:71804
    P
    		dnsmasq-2.78-7.6.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:101235
    P
    		sane-backends-1.0.32-6.6.2 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62063
    P
    		dnsmasq-2.78-7.6.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:110649
    P
    		Security update for dnsmasq (Important)
    2021-01-20
    oval:org.opensuse.security:def:111051
    P
    		Security update for dnsmasq (Important)
    2021-01-20
    oval:org.opensuse.security:def:31177
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:59476
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:21393
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:54738
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:88433
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:104126
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:75557
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:84144
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:com.redhat.rhsa:def:20210150
    P
    		RHSA-2021:0150: dnsmasq security update (Important)
    2021-01-19
    oval:org.opensuse.security:def:5689
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:91196
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:33653
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:64322
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:117416
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:28915
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:57447
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:98161
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:38127
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:51141
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:86560
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:82122
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:69465
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:31624
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:59734
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:23153
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:55189
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:89131
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:104851
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:75846
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:84602
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:96947
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:8580
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:33911
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:64499
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:125537
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:29366
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:57919
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:40127
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:87385
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:73444
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:82573
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:70219
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:32096
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:60259
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:23576
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:55826
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:89389
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:107901
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:44557
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:85641
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:96951
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:9325
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:34436
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:66489
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:126707
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:30003
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:58744
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:41275
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:51892
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:88120
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:73621
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:83210
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:5400
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:90471
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:32921
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:23904
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:57000
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:97436
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:108616
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:45705
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:86088
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:10079
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:81075
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:66778
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    oval:org.opensuse.security:def:127104
    P
    		Security update for dnsmasq (Important)
    2021-01-19
    BACK
    thekelleys dnsmasq *
    fedoraproject fedora 32
    fedoraproject fedora 33
    debian debian linux 9.0
    debian debian linux 10.0
    thekelleys dnsmasq 2.80
    thekelleys dnsmasq 2.82
    thekelleys dnsmasq 2.81