Test ID:	1.3.6.1.4.1.25623.1.1.13.2021.040.01
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2021-040-01)
Summary:	The remote host is missing an update for the 'dnsmasq' package(s) announced via the SSA:2021-040-01 advisory.
Description:	Summary: The remote host is missing an update for the 'dnsmasq' package(s) announced via the SSA:2021-040-01 advisory. Vulnerability Insight: New dnsmasq packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/dnsmasq-2.84-i586-1_slack14.2.txz: Upgraded. This update fixes bugs and remotely exploitable security issues: Use the values of --min-port and --max-port in outgoing TCP connections to upstream DNS servers. Fix a remote buffer overflow problem in the DNSSEC code. Any dnsmasq with DNSSEC compiled in and enabled is vulnerable to this, referenced by CVE-2020-25681, CVE-2020-25682, CVE-2020-25683 CVE-2020-25687. Be sure to only accept UDP DNS query replies at the address from which the query was originated. This keeps as much entropy in the {query-ID, random-port} tuple as possible, to help defeat cache poisoning attacks. Refer: CVE-2020-25684. Use the SHA-256 hash function to verify that DNS answers received are for the questions originally asked. This replaces the slightly insecure SHA-1 (when compiled with DNSSEC) or the very insecure CRC32 (otherwise). Refer: CVE-2020-25685. Handle multiple identical near simultaneous DNS queries better. Previously, such queries would all be forwarded independently. This is, in theory, inefficient but in practise not a problem, _except_ that is means that an answer for any of the forwarded queries will be accepted and cached. An attacker can send a query multiple times, and for each repeat, another {port, ID} becomes capable of accepting the answer he is sending in the blind, to random IDs and ports. The chance of a successful attack is therefore multiplied by the number of repeats of the query. The new behaviour detects repeated queries and merely stores the clients sending repeats so that when the first query completes, the answer can be sent to all the clients who asked. Refer: CVE-2020-25686. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'dnsmasq' package(s) on Slackware 14.0, Slackware 14.1, Slackware 14.2, Slackware current. Solution: Please install the updated package(s). CVSS Score: 8.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-25681 Debian Security Information: DSA-4844 (Google Search) https://www.debian.org/security/2021/dsa-4844 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGB7HL3OWHTLEPSMLDGOMXQKG3KM2QME/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYW3IR6APUSKOYKL5FT3ACTIHWHGQY32/ https://security.gentoo.org/glsa/202101-17 https://bugzilla.redhat.com/show_bug.cgi?id=1881875 https://www.jsof-tech.com/disclosures/dnspooq/ https://lists.debian.org/debian-lts-announce/2021/03/msg00027.html Common Vulnerability Exposure (CVE) ID: CVE-2020-25682 https://bugzilla.redhat.com/show_bug.cgi?id=1882014 Common Vulnerability Exposure (CVE) ID: CVE-2020-25683 https://bugzilla.redhat.com/show_bug.cgi?id=1882018 Common Vulnerability Exposure (CVE) ID: CVE-2020-25684 https://www.arista.com/en/support/advisories-notices/security-advisories/12135-security-advisory-61 https://bugzilla.redhat.com/show_bug.cgi?id=1889686 Common Vulnerability Exposure (CVE) ID: CVE-2020-25685 https://bugzilla.redhat.com/show_bug.cgi?id=1889688 Common Vulnerability Exposure (CVE) ID: CVE-2020-25686 https://bugzilla.redhat.com/show_bug.cgi?id=1890125 Common Vulnerability Exposure (CVE) ID: CVE-2020-25687 https://bugzilla.redhat.com/show_bug.cgi?id=1891568
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.