CVE-2021-3448

08.04.2021, 23:15

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 10%

Vendor	Product	Version
thekelleys	dnsmasq	𝑥 < 2.85
redhat	enterprise_linux	8.0
oracle	communications_cloud_native_core_network_function_cloud_native_environment	1.9.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

dnsmasq

bullseye	2.85-1 fixed
buster	postponed
stretch	postponed
bookworm	2.89-1 fixed
sid	2.90-4 fixed
trixie	2.90-4 fixed

Ubuntu Releases

Ubuntu Product

Codename

dnsmasq

noble	Fixed 2.85-1ubuntu1 released
mantic	Fixed 2.85-1ubuntu1 released
lunar	Fixed 2.85-1ubuntu1 released
kinetic	Fixed 2.85-1ubuntu1 released
jammy	Fixed 2.85-1ubuntu1 released
impish	Fixed 2.85-1ubuntu1 released
hirsute	Fixed 2.84-1ubuntu2.1 released
groovy	Fixed 2.82-1ubuntu1.3 released
focal	Fixed 2.80-1.1ubuntu1.4 released
bionic	Fixed 2.79-1ubuntu0.4 released
xenial	Fixed 2.79-1ubuntu0.16.04.1+esm1 released
trusty	needed

Known Exploits!

Common Weakness Enumeration

CWE-358 - Improperly Implemented Security Check for Standard
The software does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1939368

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/