CVE-2020-25684 Other in dnsmasq
An attacker can forge DNS replies to poison the cache due to insufficient validation of forwarded query attributes, compromising data integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-25684?
CVE-2020-25684 is a low-severity vulnerability in Debian Debian Linux, published on 20 Jan 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the exact forwarded query, substantially reducing the number of attempts an attacker on the network would have to perform to forge a reply and get it accepted by dnsmasq. This issue contrasts with RFC5452, which specifies a query's attributes that all must be used to match a reply. This flaw allows an attacker to perform a DNS Cache Poisoning attack. If chained with CVE-2020-25685 or CVE-2020-25686, the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity.
Weakness: CWE-358
Which versions are affected by CVE-2020-25684?
It affects 4 products.
Products include Arista Eos, Debian Debian Linux, Fedoraproject Fedora, Thekelleys Dnsmasq.
How do I fix CVE-2020-25684?
Upgrade to a fixed version.
Is CVE-2020-25684 being exploited?
There is no known exploitation of CVE-2020-25684 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2020-25684, CLEANSTART-2026-PQ68728, DEBIAN-CVE-2020-25684, GHSA-xqvc-9mc9-4fgx, UBUNTU-CVE-2020-25684.