drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in dnsmasq
Name: |
Zwei Probleme in dnsmasq |
|
ID: |
200809-02 |
|
Distribution: |
Gentoo |
|
Plattformen: |
Keine Angabe |
|
Datum: |
Do, 4. September 2008, 22:02 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3350 |
|
Applikationen: |
Dnsmasq |
|
Originalnachricht |
--nextPart3251904.E3jkEujYOI Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Disposition: inline
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200809-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal Title: dnsmasq: Denial of Service and DNS spoofing Date: September 04, 2008 Bugs: #231282, #232523 ID: 200809-02
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis ========
Two vulnerabilities in dnsmasq might allow for a Denial of Service or spoofing of DNS replies.
Background ==========
Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP server.
Affected packages =================
------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-dns/dnsmasq < 2.45 >= 2.45
Description ===========
* Dan Kaminsky of IOActive reported that dnsmasq does not randomize UDP source ports when forwarding DNS queries to a recursing DNS server (CVE-2008-1447).
* Carlos Carvalho reported that dnsmasq in the 2.43 version does not properly handle clients sending inform or renewal queries for unknown DHCP leases, leading to a crash (CVE-2008-3350).
Impact ======
A remote attacker could send spoofed DNS response traffic to dnsmasq, possibly involving generating queries via multiple vectors, and spoof DNS replies, which could e.g. lead to the redirection of web or mail traffic to malicious sites. Furthermore, an attacker could generate invalid DHCP traffic and cause a Denial of Service.
Workaround ==========
There is no known workaround at this time.
Resolution ==========
All dnsmasq users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-dns/dnsmasq-2.45"
References ==========
[ 1 ] CVE-2008-3350 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3350 [ 2 ] CVE-2008-1447 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447
Availability ============
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200809-02.xml
Concerns? =========
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org.
License =======
Copyright 2008 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
--nextPart3251904.E3jkEujYOI Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux)
iQIcBAABAgAGBQJIwDbkAAoJECaaHo/OfoM5CqAP/2oxqJFrqHjKRAuq0nQeR214 4wvO6mFzDEOOyeTtpptY3ZJsh9QTTDSPm698St8jmOpSjs9j4oZ3Gte3/oQaAiJq DJuWqO6f0Q02B3UIOBzMAniLQJmBbKZwyE4ECCP2ycyvnrdvbPDC3mKjK7XxaVCR 8jgC633o3XFLPglqFxe6+luxMKgktzVwacD3Mk7bzIWpATlsMrqr431KmNkx5YNb Y9kbd8aq87JWU4DX1eOGxKrRK/Tc+SAIMbiz1xYHAuzp4ewjoUkrPukPpDQ4ldWI SbC1BfkBi9NwRiE/lIZz31NBT/UpUnpRLPCZuU9fVDURZBzXCZN2oPShYyyyV3Kh 9t5DGe0mZRVJIo4pQSGkyN3RZYR1MgYPxhhvxjrg6StwrtAIUx6MjWkhh6+8oK7Z NEKve+5PwLGvCncWmfXO9k+gKoYWBKdx1YhatKO2tcYjlfOdTmrQcdTHda5wYHgm 4Moctu/V7wUj99HizooQkKhR7l3/MRubMDWhs7Das6bE5++zUraFy1xrTy8tc7X/ RcqTsXPk9InEjxI4S8Zy2TNer6zT0PjhQve0RRiB69iTy1cv2EYDl3K4S2XDdz6j FqdNW8aoTznXRQ00C5ePeGb9qIUIdVdDWrnuSgKT41PPy0ciKkDE12jp7LlS6K9G EeBfQx8pUnGIrxcbfNji =DP+i -----END PGP SIGNATURE-----
--nextPart3251904.E3jkEujYOI--
|
|
|
|