Test ID:	1.3.6.1.4.1.25623.1.1.2.2023.1219
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2023-1219)
Summary:	The remote host is missing an update for the Huawei EulerOS 'dnsmasq' package(s) announced via the EulerOS-SA-2023-1219 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'dnsmasq' package(s) announced via the EulerOS-SA-2023-1219 advisory. Vulnerability Insight: A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option `local-service` is not enabled. Running dnsmasq in this manner may inadvertently make it an open resolver accessible from any address on the internet. This flaw allows an attacker to conduct a Distributed Denial of Service (DDoS) against other systems.(CVE-2020-14312) Affected Software/OS: 'dnsmasq' package(s) on Huawei EulerOS Virtualization release 2.9.0. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14312 https://bugzilla.redhat.com/show_bug.cgi?id=1851342
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.