CVE-2023-28450
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-28450
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-28450.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-28450
- Related
- Published
- 2023-03-15T21:15:09Z
- Modified
- 2025-02-26T22:49:42.553599Z
- Downstream
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.
- References
-
- https://capec.mitre.org/data/definitions/495.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/
- https://thekelleys.org.uk/dnsmasq/doc.html
- https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=blob%3Bf=CHANGELOG
- https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5
- https://security.alpinelinux.org/vuln/CVE-2023-28450
- https://security-tracker.debian.org/tracker/CVE-2023-28450
Affected packages
Alpine:v3.14 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:apk/alpine/dnsmasq?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.86-r3
Affected versions
2.*
2.46-r0
2.47-r0
2.49-r0
2.50-r0
2.50-r1
2.51-r0
2.52-r0
2.52-r1
2.55-r0
2.57-r0
2.58-r0
2.59-r0
2.59-r1
2.60-r0
2.61-r0
2.62-r0
2.63-r0
2.64-r0
2.65-r0
2.66-r0
2.66-r1
2.66-r2
2.67-r0
2.68-r0
2.69-r0
2.70-r0
2.71-r0
2.72-r0
2.72-r1
2.73-r0
2.75-r0
2.75-r1
2.75-r2
2.76-r0
2.76-r1
2.76-r2
2.76-r3
2.76-r4
2.77-r0
2.78-r0
2.78-r1
2.78-r2
2.79-r0
2.79-r1
2.79-r2
2.80-r0
2.80-r1
2.80-r2
2.80-r3
2.80-r4
2.80-r5
2.81-r0
2.81-r1
2.82-r0
2.83-r0
2.84-r0
2.85-r0
2.85-r1
2.85-r2
2.85-r3
Alpine:v3.15 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:apk/alpine/dnsmasq?arch=source
Alpine:v3.16 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:apk/alpine/dnsmasq?arch=source
Alpine:v3.17 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:apk/alpine/dnsmasq?arch=source
Alpine:v3.18 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:apk/alpine/dnsmasq?arch=source
Alpine:v3.19 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:apk/alpine/dnsmasq?arch=source
Alpine:v3.20 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:apk/alpine/dnsmasq?arch=source
Alpine:v3.21 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:apk/alpine/dnsmasq?arch=source
Debian:11 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:deb/debian/dnsmasq?arch=source
Debian:12 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:deb/debian/dnsmasq?arch=source
Debian:13 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:deb/debian/dnsmasq?arch=source