Test ID:	1.3.6.1.4.1.25623.1.1.10.2020.0310
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2020-0310)
Summary:	The remote host is missing an update for the 'dnsmasq' package(s) announced via the MGASA-2020-0310 advisory.
Description:	Summary: The remote host is missing an update for the 'dnsmasq' package(s) announced via the MGASA-2020-0310 advisory. Vulnerability Insight: Updated dnsmasq package fix insecure default configuration potentially making it an open resolver (CVE-2020-14312). In its default configuration, dnsmasq listen and answer query from any address even outside of the local subnet. Thus, it may inadvertently become an open resolver which might be used in Distributed Denial of Service attacks. This update add the option --local-service at startup which limits dnsmasq to listen only to machines on the same local network. This option only works if there aren't any of the following options on cmdline or in dnsmasq.conf (without the double dash): --interface --except-interface --listen-address --auth-server Affected Software/OS: 'dnsmasq' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14312 https://bugzilla.redhat.com/show_bug.cgi?id=1851342
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.