ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2020.0310
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2020-0310)
Resumen:	The remote host is missing an update for the 'dnsmasq' package(s) announced via the MGASA-2020-0310 advisory.
Descripción:	Summary: The remote host is missing an update for the 'dnsmasq' package(s) announced via the MGASA-2020-0310 advisory. Vulnerability Insight: Updated dnsmasq package fix insecure default configuration potentially making it an open resolver (CVE-2020-14312). In its default configuration, dnsmasq listen and answer query from any address even outside of the local subnet. Thus, it may inadvertently become an open resolver which might be used in Distributed Denial of Service attacks. This update add the option --local-service at startup which limits dnsmasq to listen only to machines on the same local network. This option only works if there aren't any of the following options on cmdline or in dnsmasq.conf (without the double dash): --interface --except-interface --listen-address --auth-server Affected Software/OS: 'dnsmasq' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14312 https://bugzilla.redhat.com/show_bug.cgi?id=1851342
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.