SUSE-SU-2015:0979-2

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2015:0979-2

Related

Published

2015-04-28T16:45:15Z

Modified

2015-04-28T16:45:15Z

Summary

Security update for dnsmasq

Details

The DNS server dnsmasq was updated to fix one security issue and one non-security bug.

The following vulnerability was fixed:

CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service (DoS) or read heap memory, potentially disclosing information such as performed DNS queries or encryption keys. (bsc#928867)

The following bug was fixed:

bsc#923144: When answer to an upstream query is a CNAME pointing to an A/AAAA record which is present locally (/etc/hosts), allow caching when the upstream and local A/AAAA records have the same value.

References

Affected packages

Name: dnsmasq
Purl: pkg:rpm/suse/dnsmasq&distro=SUSE%20Cloud%20Compute%20Node%20for%20SUSE%20Linux%20Enterprise%2012%205

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.71-4.1

{
    "binaries": [
        {
            "dnsmasq-utils": "2.71-4.1"
        }
    ]
}