{"id":"CVE-2021-3448","aliases":["ALPINE-CVE-2021-3448","ALSA-2021:4153","BELL-CVE-2021-3448","DEBIAN-CVE-2021-3448","EUVD-2021-26773","GHSA-vvf4-c8p4-89v5","MGASA-2021-0231","OESA-2021-1189","RHSA-2021:4153","RLSA-2021:4153","SUSE-SU-2021:3530-1","SUSE-SU-2022:1288-1","SUSE-SU-2022:1289-1","SUSE-SU-2022:14940-1","SUSE-SU-2022:14941-1","UBUNTU-CVE-2021-3448","USN-4976-1","USN-4976-2","openSUSE-SU-2021:1426-1","openSUSE-SU-2021:3530-1","openSUSE-SU-2024:10721-1"],"status":"published","title":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for...","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02283,"percentile":0.83281,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-358"],"published":"2021-04-08T22:06:45Z","modified":"2026-10-29T11:00:47Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dnsmasq","fixed_in":["2.85-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dnsmasq","fixed_in":["2.79-19.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dnsmasq-utils","fixed_in":["2.79-19.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dnsmasq","fixed_in":["2.85-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dnsmasq","fixed_in":["2.85-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.85-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"dnsmasq","fixed_in":["2.85-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"dnsmasq","fixed_in":["2.85-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"dnsmasq","fixed_in":["2.82-8.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq","fixed_in":["0:2.79-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debuginfo","fixed_in":["0:2.79-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debugsource","fixed_in":["0:2.79-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils","fixed_in":["0:2.79-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils-debuginfo","fixed_in":["0:2.79-19.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dnsmasq","fixed_in":["0:2.79-19.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","fixed_in":["2.79-1ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","fixed_in":["2.79-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","fixed_in":["2.80-1.1ubuntu1.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-19.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-19.el8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.82-8.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-19.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-19.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-150000.3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-150000.3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-150000.3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-150000.3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.16.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.17.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1","2.68-1ubuntu0.2","2.68-1ubuntu0.2+esm1","2.68-1ubuntu0.2+esm2","2.68-1ubuntu0.2+esm3","2.68-1ubuntu0.2+esm5","2.68-1ubuntu0.2+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.16.04.1+esm1"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8","2.75-1ubuntu0.16.04.10","2.75-1ubuntu0.16.04.10+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.4"}]}],"versions":["2.78-1","2.78-3","2.79-1","2.79-1ubuntu0.2","2.79-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-1.1ubuntu1.4"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1","2.80-1.1ubuntu1.2","2.80-1.1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.4"}]}],"versions":["2.78-1","2.78-3","2.79-1","2.79-1ubuntu0.2","2.79-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-1.1ubuntu1.4"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1","2.80-1.1ubuntu1.2","2.80-1.1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.16.04.1+esm1"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8","2.75-1ubuntu0.16.04.10","2.75-1ubuntu0.16.04.10+esm1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-lp152.7.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-7.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-1.1"}]}],"bundled":14}],"products":[{"vendor":"dnsmasq","product":"dnsmasq"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oracle","product":"communications_cloud_native_core_network_function_cloud_native_environment"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"thekelleys","product":"dnsmasq"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939368","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202105-20","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3448","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V"},{"url":"https://github.com/advisories/GHSA-vvf4-c8p4-89v5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3448","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-3448","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3448","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3448","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0231.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29030","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1189","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4153","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947039","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4153.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3448","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4153","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213530-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173646","tags":["report"]},{"url":"https://bugzilla.suse.com/1180914","tags":["report"]},{"url":"https://bugzilla.suse.com/1183709","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3448","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221288-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1197872","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0934","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221289-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214940-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1138743","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214941-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3448","tags":["report"]},{"url":"https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q1/014835.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4976-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4976-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q5SXZU2UVUXVIVOLI6OT32WIQ6OJBE5E/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2DP73HQCB6UNPUB54KPOZEMBUQDVN6M6/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25686","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-3448","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","status":"published","published":"2021-04-08T22:06:45Z","modified":"2025-12-03T00:40:40.22Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-358"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26773","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","status":"published","published":"2021-04-08T22:06:45Z","modified":"2025-12-03T00:40:40Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:10.716009Z"}],"ghsa":[{"id":"GHSA-vvf4-c8p4-89v5","title":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for...","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","status":"published","published":"2022-05-24T17:47:02Z","modified":"2025-12-03T03:34:05Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-358"],"updated_at":"2026-11-02T15:05:01.323335Z"}],"nvd":[{"id":"CVE-2021-3448","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","status":"published","published":"2021-04-08T23:15:12.597Z","modified":"2026-06-17T04:05:07.153Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-358"],"updated_at":"2026-11-02T14:06:51.610648Z"}],"osv":[{"id":"ALPINE-CVE-2021-3448","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","status":"published","published":"2021-04-08T23:15:12.597Z","modified":"2026-10-23T17:17:56.192949738Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"BELL-CVE-2021-3448","title":"CVE-2021-3448 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:42.793047Z","modified":"2026-01-26T09:49:35.398474Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3448","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","status":"published","published":"2021-04-08T23:15:12.597Z","modified":"2026-04-16T04:38:25.241498719Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-3448","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","status":"published","published":"2021-04-08T23:15:12.597Z","modified":"2026-10-23T18:04:50.697068135Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1189","title":"dnsmasq security update","description":"Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.(CVE-2021-3448)","status":"published","published":"2021-05-15T11:04:25Z","modified":"2026-08-18T01:15:46.76325503Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4153","title":"Red Hat Security Advisory: dnsmasq security and bug fix update","status":"published","published":"2024-09-16T05:32:16Z","modified":"2025-12-03T11:10:04.882054Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4153","title":"Moderate: dnsmasq security and bug fix update","description":"The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* dnsmasq: fixed outgoing port used when --server is used with an interface name (CVE-2021-3448)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:24:48Z","modified":"2026-02-05T03:15:13.056255Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3448","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.","status":"published","published":"2021-04-08T23:15:00Z","modified":"2026-05-26T20:00:14.983700482Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"},{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"ALSA-2021:4153","title":"Moderate: dnsmasq security and bug fix update","description":"The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* dnsmasq: fixed outgoing port used when --server is used with an interface name (CVE-2021-3448)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:24:48Z","modified":"2026-10-29T11:00:47.315345654Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"MGASA-2021-0231","title":"Updated dnsmasq packages fix a security vulnerability","description":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier (CVE-2021-3448).\nThis kind of configuration is the default when network-manager uses dnsmasq.\n","status":"published","published":"2021-06-08T14:33:02Z","modified":"2026-04-16T04:43:34.555969944Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:1426-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nUpdate to version 2.86\n\n- CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709)\n- CVE-2020-14312: Set --local-service by default (bsc#1173646).\n- Open inotify socket only when used (bsc#1180914).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2021-10-31T15:08:35Z","modified":"2026-02-04T04:24:17.584283Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3530-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nUpdate to version 2.86\n\n- CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709)\n- CVE-2020-14312: Set --local-service by default (bsc#1173646).\n- Open inotify socket only when used (bsc#1180914).\n","status":"published","published":"2021-10-27T07:24:50Z","modified":"2025-05-07T18:11:30.928101Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10721-1","title":"dnsmasq-2.86-1.1 on GA media","description":"These are all security issues fixed in the dnsmasq-2.86-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:12.975434Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:3530-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\nUpdate to version 2.86\n\n- CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709)\n- CVE-2020-14312: Set --local-service by default (bsc#1173646).\n- Open inotify socket only when used (bsc#1180914).\n","status":"published","published":"2021-10-27T07:25:05Z","modified":"2026-02-04T02:17:50.802306Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:1288-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant\n  outgoing port being used when for certain use cases of the --server option\n  (bsc#1183709).\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n","status":"published","published":"2022-04-21T12:52:57Z","modified":"2026-02-04T02:35:08.019135Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1289-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant\n  outgoing port being used when for certain use cases of the --server option\n  (bsc#1183709).\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n","status":"published","published":"2022-04-21T12:54:28Z","modified":"2026-02-04T02:22:14.226835Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:14940-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant\n  outgoing port being used when for certain use cases of the --server option\n  (bsc#1183709).\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n\nNon-security fixes:\n\n- Removed cache size limit (bsc#1138743).\n","status":"published","published":"2022-04-21T12:55:50Z","modified":"2026-02-04T02:14:18.61644Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:14941-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant\n  outgoing port being used when for certain use cases of the --server option\n  (bsc#1183709).\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n","status":"published","published":"2022-04-21T12:57:08Z","modified":"2026-02-04T03:39:00.573361Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-4976-1","title":"dnsmasq vulnerability","description":"Petr Mensik discovered that Dnsmasq incorrectly randomized source ports in\ncertain configurations. A remote attacker could possibly use this issue to\nfacilitate DNS cache poisoning attacks.\n","status":"published","published":"2021-06-02T13:21:40Z","modified":"2026-02-10T04:42:13Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4976-2","title":"dnsmasq vulnerability","description":"USN-4976-1 fixed a vulnerability in Dnsmasq. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nDnsmasq has been updated to 2.79-1 for Ubuntu 16.04 ESM in order to fix\nsome security issues.\n\nOriginal advisory details:\n\n Petr Mensik discovered that Dnsmasq incorrectly randomized source ports in\n certain configurations. A remote attacker could possibly use this issue to\n facilitate DNS cache poisoning attacks.\n","status":"published","published":"2022-09-07T15:22:39Z","modified":"2026-06-25T13:30:38.170046541Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}