{"id":"CVE-2023-28450","aliases":["ALPINE-CVE-2023-28450","ALSA-2023:6524","ALSA-2023:7046","AZL-25660","BELL-CVE-2023-28450","CLSA-2024-1720179161","CLSA-2025-1744628407","CLSA-2026-1792817189","CLSA-2026-1792817408","DEBIAN-CVE-2023-28450","DLA-3974-1","EUVD-2023-32132","GHSA-vgrx-vhjf-p7wv","MGASA-2023-0153","RHSA-2023:6524","RHSA-2023:7046","RHSA-2024:1544","RHSA-2024:1545","RHSA-2024:4052","SUSE-SU-2023:1930-1","SUSE-SU-2023:2123-1","SUSE-SU-2025:0071-1","SUSE-SU-2025:20118-1","UBUNTU-CVE-2023-28450","USN-6034-1","USN-6657-1","USN-6657-2","openSUSE-SU-2024:12887-1"],"status":"published","title":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was...","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01838,"percentile":0.79261,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-03-15T00:00:00Z","modified":"2026-10-29T11:31:31Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"dnsmasq","fixed_in":["2.86-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"dnsmasq","fixed_in":["2.86-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dnsmasq","fixed_in":["2.86-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dnsmasq","fixed_in":["2.87-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dnsmasq","fixed_in":["2.89-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dnsmasq","fixed_in":["2.89-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dnsmasq","fixed_in":["2.89-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dnsmasq","fixed_in":["2.89-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dnsmasq","fixed_in":["2.89-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dnsmasq","fixed_in":["2.89-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dnsmasq","fixed_in":["2.89-r3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dnsmasq","fixed_in":["2.85-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dnsmasq-utils","fixed_in":["2.85-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dnsmasq","fixed_in":["2.79-31.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dnsmasq-utils","fixed_in":["2.79-31.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"dnsmasq","fixed_in":["2.89-2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dnsmasq","fixed_in":["2.76-17.el7_9.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dnsmasq-utils","fixed_in":["2.76-17.el7_9.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dnsmasq","fixed_in":["2.85-6.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dnsmasq-utils","fixed_in":["2.85-6.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dnsmasq","fixed_in":["2.90-4~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dnsmasq","fixed_in":["2.90-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.90-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"dnsmasq","fixed_in":["2.85-6.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq","fixed_in":["0:2.85-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-debuginfo","fixed_in":["0:2.85-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-debugsource","fixed_in":["0:2.85-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-utils","fixed_in":["0:2.85-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-utils-debuginfo","fixed_in":["0:2.85-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq","fixed_in":["0:2.79-31.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debuginfo","fixed_in":["0:2.79-31.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debugsource","fixed_in":["0:2.79-31.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils","fixed_in":["0:2.79-31.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils-debuginfo","fixed_in":["0:2.79-31.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq","fixed_in":["0:2.85-6.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq-debuginfo","fixed_in":["0:2.85-6.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq-debugsource","fixed_in":["0:2.85-6.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq-utils","fixed_in":["0:2.85-6.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq-utils-debuginfo","fixed_in":["0:2.85-6.el9_2.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"dnsmasq","fixed_in":["2.86-150100.7.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"dnsmasq","fixed_in":["2.86-150100.7.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"dnsmasq","fixed_in":["2.86-150100.7.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dnsmasq","fixed_in":["2.78-18.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"dnsmasq","fixed_in":["2.78-18.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"dnsmasq","fixed_in":["2.78-18.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dnsmasq","fixed_in":["2.78-18.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dnsmasq","fixed_in":["2.78-18.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dnsmasq","fixed_in":["2.78-18.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dnsmasq","fixed_in":["2.78-18.21.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","fixed_in":["2.68-1ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","fixed_in":["2.79-1ubuntu0.16.04.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","fixed_in":["2.79-1ubuntu0.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","fixed_in":["2.80-1.1ubuntu1.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"dnsmasq","fixed_in":["2.86-1.1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","fixed_in":["2.89-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.87-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-r3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-31.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-31.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.el7_9.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.el7_9.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-6.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-6.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.0.3.el7_9.99.tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.0.3.el7_9.99.tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.0.3.el7_9.99.tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.0.3.el7_9.99.tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-4~deb12u1"}]}],"versions":["2.89-1","2.90-1","2.90-2","2.90-3"]},{"source":"osv","ecosystem":"Debian:13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-1+deb11u1"}]}],"versions":["2.85-1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-6.mga8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-31.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-31.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-31.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-31.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-31.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-26.el8_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-26.el8_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-26.el8_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-26.el8_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-26.el8_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-6.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-6.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-6.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-6.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-6.el9_2.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-150400.16.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-1ubuntu0.2+esm2"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1","2.68-1ubuntu0.2","2.68-1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.16.04.1+esm2"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8","2.75-1ubuntu0.16.04.10","2.75-1ubuntu0.16.04.10+esm1","2.79-1ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.7"}]}],"versions":["2.78-1","2.78-3","2.79-1","2.79-1ubuntu0.2","2.79-1ubuntu0.3","2.79-1ubuntu0.4","2.79-1ubuntu0.5","2.79-1ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-1.1ubuntu1.7"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1","2.80-1.1ubuntu1.2","2.80-1.1ubuntu1.3","2.80-1.1ubuntu1.4","2.80-1.1ubuntu1.5","2.80-1.1ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-1.1ubuntu0.3"}]}],"versions":["2.85-1ubuntu2","2.86-1.1","2.86-1.1ubuntu0.1","2.86-1.1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-1ubuntu0.2+esm2"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1","2.68-1ubuntu0.2","2.68-1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.16.04.1+esm2"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8","2.75-1ubuntu0.16.04.10","2.75-1ubuntu0.16.04.10+esm1","2.79-1ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.7"}]}],"versions":["2.78-1","2.78-3","2.79-1","2.79-1ubuntu0.2","2.79-1ubuntu0.3","2.79-1ubuntu0.4","2.79-1ubuntu0.5","2.79-1ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-1.1ubuntu1.7"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1","2.80-1.1ubuntu1.2","2.80-1.1ubuntu1.3","2.80-1.1ubuntu1.4","2.80-1.1ubuntu1.5","2.80-1.1ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-1.1ubuntu0.3"}]}],"versions":["2.85-1ubuntu2","2.86-1.1","2.86-1.1ubuntu0.1","2.86-1.1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-0ubuntu0.20.04.1"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1","2.80-1.1ubuntu1.2","2.80-1.1ubuntu1.3","2.80-1.1ubuntu1.4","2.80-1.1ubuntu1.5","2.80-1.1ubuntu1.6","2.80-1.1ubuntu1.7"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-0ubuntu0.22.04.1"}]}],"versions":["2.85-1ubuntu2","2.86-1.1","2.86-1.1ubuntu0.1","2.86-1.1ubuntu0.2","2.86-1.1ubuntu0.3","2.86-1.1ubuntu0.4","2.86-1.1ubuntu0.5"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-0ubuntu0.16.04.1+esm1"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8","2.75-1ubuntu0.16.04.10","2.75-1ubuntu0.16.04.10+esm1","2.79-1ubuntu0.16.04.1+esm1","2.79-1ubuntu0.16.04.1+esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90-0ubuntu0.18.04.1+esm1"}]}],"versions":["2.78-1","2.78-3","2.79-1","2.79-1ubuntu0.2","2.79-1ubuntu0.3","2.79-1ubuntu0.4","2.79-1ubuntu0.5","2.79-1ubuntu0.6","2.79-1ubuntu0.7"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-3.1"}]}]}],"products":[{"vendor":"thekelleys","product":"dnsmasq"}],"references":[{"url":"https://thekelleys.org.uk/dnsmasq/doc.html","tags":["x_transferred","Product","web","report"]},{"url":"https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5","tags":["x_transferred","web"]},{"url":"https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=blob%3Bf=CHANGELOG","tags":["x_transferred","web"]},{"url":"https://capec.mitre.org/data/definitions/495.html","tags":["x_transferred","Not Applicable","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28450","tags":["web","advisory"]},{"url":"https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob;f=CHANGELOG","tags":["report"]},{"url":"https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA"},{"url":"https://github.com/advisories/GHSA-vgrx-vhjf-p7wv","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-28450","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6524","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28450","tags":["report"]},{"url":"https://bugzilla.redhat.com/2178948","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6524.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7046","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-7046.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-28450","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1720179161.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1744628407.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792817189.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4892","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792817408.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0934","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-28450","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0153.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31770","tags":["report"]},{"url":"http://www.dnsflagday.net/2020/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209031","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6524.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28450","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2207798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233542","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7046.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1544","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263917","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1544.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50387","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50387","tags":["advisory"]},{"url":"https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released","tags":["article"]},{"url":"https://kb.isc.org/docs/cve-2023-50387","tags":["article"]},{"url":"https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50868","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2023-50868","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1545","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057075","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1545.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0934","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0934","tags":["advisory"]},{"url":"https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4052","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4052.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231930-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209358","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28450","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232123-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250071-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200344","tags":["report"]},{"url":"https://bugzilla.suse.com/1207174","tags":["report"]},{"url":"https://bugzilla.suse.com/1214884","tags":["report"]},{"url":"https://bugzilla.suse.com/1219823","tags":["report"]},{"url":"https://bugzilla.suse.com/1219826","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50868","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520118-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-28450","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6034-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6657-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6657-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-50387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-50868","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-28450","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T00:00:00Z","modified":"2025-11-03T21:47:37.596Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:35:32.752775Z"}],"euvd":[{"id":"EUVD-2023-32132","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T00:00:00Z","modified":"2025-11-03T21:47:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:31.25882Z"}],"ghsa":[{"id":"GHSA-vgrx-vhjf-p7wv","title":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was...","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T21:30:25Z","modified":"2025-11-04T00:30:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:25.970519Z"}],"nvd":[{"id":"CVE-2023-28450","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T21:15:09.333Z","modified":"2026-06-17T05:47:45.783Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:49.031498Z"}],"osv":[{"id":"ALPINE-CVE-2023-28450","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T21:15:09.333Z","modified":"2026-10-26T17:17:58.618639301Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.202584Z"},{"id":"AZL-25660","title":"CVE-2023-28450 affecting package dnsmasq for versions less than 2.89-2","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T21:15:09Z","modified":"2026-04-21T04:23:10.774461Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-28450","title":"CVE-2023-28450 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:50.930488Z","modified":"2026-01-26T09:46:56.713368Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-28450","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T21:15:09.333Z","modified":"2026-04-16T04:32:50.471085845Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DEBIAN-CVE-2023-28450","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T21:15:09.333Z","modified":"2026-10-26T18:00:48.361761159Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"RHSA-2023:6524","title":"Red Hat Security Advisory: dnsmasq security and bug fix update","status":"published","published":"2024-09-16T12:37:29Z","modified":"2026-05-01T10:34:29.015791Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7046","title":"Red Hat Security Advisory: dnsmasq security and bug fix update","status":"published","published":"2024-09-16T12:37:39Z","modified":"2026-05-01T10:36:45.755562Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2024:1544","title":"Red Hat Security Advisory: dnsmasq security and bug fix update","status":"published","published":"2024-09-16T17:54:03Z","modified":"2026-05-01T10:10:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1545","title":"Red Hat Security Advisory: dnsmasq security update","status":"published","published":"2024-09-16T17:54:10Z","modified":"2026-05-01T10:10:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:4052","title":"Red Hat Security Advisory: dnsmasq security update","status":"published","published":"2024-09-16T12:38:07Z","modified":"2026-05-01T10:12:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"UBUNTU-CVE-2023-28450","description":"An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.","status":"published","published":"2023-03-15T21:15:00Z","modified":"2026-02-04T02:20:28.242976Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:6524","title":"Moderate: dnsmasq security and bug fix update","description":"The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-28450)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:31.653981395Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:7046","title":"Moderate: dnsmasq security and bug fix update","description":"The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-28450)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:19.371956554Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2024-1720179161","title":"dnsmasq: Fix of CVE-2023-28450","description":"- change EDNS.0 UDP packet size from 4096 to 1232\n- CVE-2023-28450","status":"published","published":"2024-07-05T11:32:44Z","modified":"2026-06-01T00:33:17.536676725Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2025-1744628407","title":"dnsmasq: Fix of CVE-2023-28450","description":"- CVE-2023-28450: Set the default maximum DNS UDP packet size to 1232","status":"published","published":"2025-04-14T11:00:13Z","modified":"2026-06-01T00:30:48.970293574Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1792817189","title":"dnsmasq: Fix of 4 CVEs","description":"- Build for rhel7els, oraclelinux7els and cloudlinux7els: they get the\n  existing fixes for CVE-2022-0934, CVE-2023-28450, CVE-2026-4890,\n  CVE-2026-4891 and CVE-2026-4892\n- Bump release to sort above Oracle Linux 7 dnsmasq-2.76-17.0.3.el7_9.3","status":"published","published":"2026-10-24T04:46:42Z","modified":"2026-10-26T09:31:57.387650231Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792817408","title":"dnsmasq: Fix of 5 CVEs","description":"- Build for rhel7els, oraclelinux7els and cloudlinux7els: they get the\n  existing fixes for CVE-2022-0934, CVE-2023-28450, CVE-2026-4890,\n  CVE-2026-4891 and CVE-2026-4892\n- Bump release to sort above Oracle Linux 7 dnsmasq-2.76-17.0.3.el7_9.3","status":"published","published":"2026-10-24T04:50:22Z","modified":"2026-10-26T09:32:01.321357103Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"DLA-3974-1","title":"dnsmasq - security update","status":"published","published":"2024-11-29T00:00:00Z","modified":"2026-03-09T01:17:49.023108Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2023-0153","title":"Updated dnsmasq packages fix security vulnerability","description":"A flaw was found in Dnsmasq. The default maximum EDNS.0 UDP packet size\nwas set to 4096 but should be 1232 because of DNS Flag Day 2020.\n(CVE-2023-28450)\n","status":"published","published":"2023-04-24T00:20:26Z","modified":"2026-04-16T04:42:29.109752885Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12887-1","title":"dnsmasq-2.89-3.1 on GA media","description":"These are all security issues fixed in the dnsmasq-2.89-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:32:31.146736Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:1930-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2023-28450: Fixed default maximum size for EDNS.0 UDP packets (bsc#1209358).\n","status":"published","published":"2023-04-20T11:18:36Z","modified":"2026-02-04T03:49:53.031527Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2123-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2023-28450: Fixed default maximum size for EDNS.0 UDP packets (bsc#1209358).\n","status":"published","published":"2023-05-08T10:29:58Z","modified":"2026-02-04T03:09:17.68478Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2025:0071-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- Version update to 2.90:\n- CVE-2023-50387: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219823)\n- CVE-2023-50868: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219826)\n- CVE-2023-28450: Default maximum EDNS.0 UDP packet size should be 1232. (bsc#1209358)\n","status":"published","published":"2025-01-10T16:54:22Z","modified":"2026-02-04T04:23:32.362401Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:20118-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- Update to 2.90:\n\n  * CVE-2023-50387, CVE-2023-50868: Fixed a Denial Of Service while trying\n    to validate specially crafted DNSSEC responses (bsc#1219823, bsc#1219826).\n  * Fix reversion in --rev-server introduced in 2.88 which caused\n    breakage if the prefix length is not exactly divisible by 8\n    (IPv4) or 4 (IPv6).\n  * Fix possible SEGV when there server(s) for a particular domain\n    are configured, but no server which is not qualified for a\n    particular domain.\n  * Set the default maximum DNS UDP packet sice to 1232.\n  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better\n    control over which interfaces are providing DHCP service.\n  * Fix issue with stale caching\n  * Add configurable caching for arbitrary RR-types.\n  * Add --filter-rr option, to filter arbitrary RR-types.\n\n- SLP got dropped, remove config (bsc#1214884)\n","status":"published","published":"2025-02-03T09:22:40Z","modified":"2026-03-23T04:48:10.619958Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-6034-1","title":"dnsmasq vulnerability","description":"It was discovered that Dnsmasq was sending large DNS messages\nover UDP, possibly causing transmission failures due to IP\nfragmentation. This update lowers the default maximum size of\nDNS messages to improve transmission reliability over UDP.\n","status":"published","published":"2023-04-20T12:57:33Z","modified":"2026-06-29T13:50:50.468201789Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-6657-1","title":"dnsmasq vulnerabilities","description":"Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered\nthat Dnsmasq icorrectly handled validating DNSSEC messages. A remote\nattacker could possibly use this issue to cause Dnsmasq to consume\nresources, leading to a denial of service. (CVE-2023-50387)\n\nIt was discovered that Dnsmasq incorrectly handled preparing an NSEC3\nclosest encloser proof. A remote attacker could possibly use this issue to\ncause Dnsmasq to consume resources, leading to a denial of service.\n(CVE-2023-50868)\n\nIt was discovered that Dnsmasq incorrectly set the maximum EDNS.0 UDP\npacket size as required by DNS Flag Day 2020. This issue only affected\nUbuntu 23.10. (CVE-2023-28450)\n","status":"published","published":"2024-02-26T13:52:13Z","modified":"2026-04-27T17:17:21.560657954Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6657-2","title":"dnsmasq vulnerabilities","description":"USN-6657-1 fixed several vulnerabilities in Dnsmasq. This update provides\nthe corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered\n that Dnsmasq icorrectly handled validating DNSSEC messages. A remote\n attacker could possibly use this issue to cause Dnsmasq to consume\n resources, leading to a denial of service. (CVE-2023-50387)\n \n It was discovered that Dnsmasq incorrectly handled preparing an NSEC3\n closest encloser proof. A remote attacker could possibly use this issue to\n cause Dnsmasq to consume resources, leading to a denial of service.\n (CVE-2023-50868)\n \n It was discovered that Dnsmasq incorrectly set the maximum EDNS.0 UDP\n packet size as required by DNS Flag Day 2020. This issue only affected\n Ubuntu 23.10. (CVE-2023-28450)\n","status":"published","published":"2024-04-24T19:55:01Z","modified":"2026-06-25T13:32:28.629583914Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}