OESA-2021-1189

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1189
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2021-1189.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2021-1189
Upstream
Published
2021-05-15T11:02:54Z
Modified
2025-08-12T05:08:48.445253Z
Summary
dnsmasq security update
Details

Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks.

Security Fix(es):

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.(CVE-2021-3448)

Database specific 
{
    "severity": "Low"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / dnsmasq

Package

Name
dnsmasq
Purl
pkg:rpm/openEuler/dnsmasq&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.82-8.oe1

Ecosystem specific 

{
    "aarch64": [
        "dnsmasq-debugsource-2.82-8.oe1.aarch64.rpm",
        "dnsmasq-help-2.82-8.oe1.aarch64.rpm",
        "dnsmasq-2.82-8.oe1.aarch64.rpm",
        "dnsmasq-debuginfo-2.82-8.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "dnsmasq-2.82-8.oe1.x86_64.rpm",
        "dnsmasq-debugsource-2.82-8.oe1.x86_64.rpm",
        "dnsmasq-help-2.82-8.oe1.x86_64.rpm",
        "dnsmasq-debuginfo-2.82-8.oe1.x86_64.rpm"
    ],
    "src": [
        "dnsmasq-2.82-8.oe1.src.rpm"
    ]
}