Security update for dnsmasq SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:3530-1 Final 1 1 2021-10-27T07:25:05Z current 2021-10-27T07:25:05Z 2021-10-27T07:25:05Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for dnsmasq This update for dnsmasq fixes the following issues: Update to version 2.86 - CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709) - CVE-2020-14312: Set --local-service by default (bsc#1173646). - Open inotify socket only when used (bsc#1180914). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sles/15.3/virt-launcher:0.45.0-2021-3530,SUSE-2021-3530,SUSE-SLE-Module-Basesystem-15-SP2-2021-3530,SUSE-SLE-Module-Basesystem-15-SP3-2021-3530,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-3530,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-3530,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-3530,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-3530,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-3530,SUSE-SUSE-MicroOS-5.0-2021-3530,SUSE-SUSE-MicroOS-5.1-2021-3530,SUSE-Storage-6-2021-3530 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20213530-1/ Link for SUSE-SU-2021:3530-1 https://lists.suse.com/pipermail/sle-security-updates/2021-October/009660.html E-Mail link for SUSE-SU-2021:3530-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1173646 SUSE Bug 1173646 https://bugzilla.suse.com/1180914 SUSE Bug 1180914 https://bugzilla.suse.com/1183709 SUSE Bug 1183709 https://www.suse.com/security/cve/CVE-2020-14312/ SUSE CVE CVE-2020-14312 page https://www.suse.com/security/cve/CVE-2021-3448/ SUSE CVE CVE-2021-3448 page Container suse/sles/15.3/virt-launcher:0.45.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 dnsmasq-2.86-7.14.1 dnsmasq-utils-2.86-7.14.1 dnsmasq-2.86-7.14.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 dnsmasq-2.86-7.14.1 as a component of SUSE Enterprise Storage 6 dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise Micro 5.0 dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise Micro 5.1 dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS dnsmasq-2.86-7.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option `local-service` is not enabled. Running dnsmasq in this manner may inadvertently make it an open resolver accessible from any address on the internet. This flaw allows an attacker to conduct a Distributed Denial of Service (DDoS) against other systems. CVE-2020-14312 Container suse/sles/15.3/virt-launcher:0.45.0:dnsmasq-2.86-7.14.1 SUSE Enterprise Storage 6:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Micro 5.0:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Micro 5.1:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Server 15 SP1-BCL:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Server 15 SP1-LTSS:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:dnsmasq-2.86-7.14.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213530-1/ https://www.suse.com/security/cve/CVE-2020-14312.html CVE-2020-14312 https://bugzilla.suse.com/1173646 SUSE Bug 1173646 A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity. CVE-2021-3448 Container suse/sles/15.3/virt-launcher:0.45.0:dnsmasq-2.86-7.14.1 SUSE Enterprise Storage 6:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Micro 5.0:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Micro 5.1:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Server 15 SP1-BCL:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Server 15 SP1-LTSS:dnsmasq-2.86-7.14.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:dnsmasq-2.86-7.14.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213530-1/ https://www.suse.com/security/cve/CVE-2021-3448.html CVE-2021-3448 https://bugzilla.suse.com/1183709 SUSE Bug 1183709