MGASA-2024-0041

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2024-0041.html
Import Source
https://advisories.mageia.org/MGASA-2024-0041.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2024-0041
Upstream
Published
2024-02-18T01:49:05Z
Modified
2026-04-16T00:11:53Z
Summary
Updated dnsmasq packages fix security vulnerabilities
Details

This updated dnsmasq package fixes security issues: Certain DNSSEC aspects of the DNS protocol allow a remote attacker to trigger a denial of service via extreme consumption of resource caused by DNSSEC query or response:

  • KeyTrap - Extreme CPU consumption in DNSSEC validator. (CVE-2023-50387)
  • Preparing an NSEC3 closest encloser proof can exhaust CPU resources. (CVE-2023-50868)

This update also fixes issues with udp packet size (fix already present in mageia package for 2.89), possible segfault and caching.

References
Credits

Affected packages

Mageia:9 / dnsmasq

Package

Name
dnsmasq
Purl
pkg:rpm/mageia/dnsmasq?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.90-1.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2024-0041.json"