Dnsmasq up to 2.89 EDNS.0 UDP Packet Size privilege escalation

Summaryinfo

A vulnerability was found in Dnsmasq up to 2.89. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component EDNS.0 UDP Packet Size Handler. Performing a manipulation results in an unknown weakness. This vulnerability is cataloged as CVE-2023-28450. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Dnsmasq up to 2.89 (Domain Name Software). It has been classified as problematic. This affects an unknown code block of the component EDNS.0 UDP Packet Size Handler. The impact remains unknown. The summary by CVE is:

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

The weakness was shared 03/16/2023. It is possible to read the advisory at thekelleys.org.uk. This vulnerability is uniquely identified as CVE-2023-28450 since 03/15/2023. The technical details are unknown and an exploit is not publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 211973 (Debian dla-3974 : dnsmasq - security update), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 2.90 eliminates this vulnerability. Applying the patch eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5 is able to eliminate this problem. The bugfix is ready for download at thekelleys.org.uk. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (211973) and EUVD (EUVD-2023-32132). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Domain Name Software

Name

• Dnsmasq

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10
• 2.11
• 2.12
• 2.13
• 2.14
• 2.15
• 2.16
• 2.17
• 2.18
• 2.19
• 2.20
• 2.21
• 2.22
• 2.23
• 2.24
• 2.25
• 2.26
• 2.27
• 2.28
• 2.29
• 2.30
• 2.31
• 2.32
• 2.33
• 2.34
• 2.35
• 2.36
• 2.37
• 2.38
• 2.39
• 2.40
• 2.41
• 2.42
• 2.43
• 2.44
• 2.45
• 2.46
• 2.47
• 2.48
• 2.49
• 2.50
• 2.51
• 2.52
• 2.53
• 2.54
• 2.55
• 2.56
• 2.57
• 2.58
• 2.59
• 2.60
• 2.61
• 2.62
• 2.63
• 2.64
• 2.65
• 2.66
• 2.67
• 2.68
• 2.69
• 2.70
• 2.71
• 2.72
• 2.73
• 2.74
• 2.75
• 2.76
• 2.77
• 2.78
• 2.79
• 2.80
• 2.81
• 2.82
• 2.83
• 2.84
• 2.85
• 2.86
• 2.87
• 2.88
• 2.89

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion