CVE-2021-3448 Other in dnsmasq
An attacker can forge DNS replies to poison the cache if dnsmasq is configured with fixed forwarding ports, compromising data integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-3448?
CVE-2021-3448 is a medium-severity vulnerability in Fedoraproject Fedora, published on 8 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.
Weakness: CWE-358
Which versions are affected by CVE-2021-3448?
It affects 4 products.
Linux distribution packages (8)
dnsmasq AlmaLinux:8 | All versions | 2.79-19.el8 |
dnsmasq-utils AlmaLinux:8 | All versions | 2.79-19.el8 |
dnsmasq Red Hat:enterprise_linux:8::appstream | All versions | 0:2.79-19.el8 |
dnsmasq-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:2.79-19.el8 |
dnsmasq-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:2.79-19.el8 |
dnsmasq-utils Red Hat:enterprise_linux:8::appstream | All versions | 0:2.79-19.el8 |
dnsmasq-utils-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:2.79-19.el8 |
dnsmasq Rocky Linux:8 | All versions | 0:2.79-19.el8 |
Products include Fedoraproject Fedora, Oracle Communications Cloud Native Core Network Function Cloud Native Environment, Redhat Enterprise Linux, Thekelleys Dnsmasq.
How do I fix CVE-2021-3448?
Upgrade to a fixed version.
Is CVE-2021-3448 being exploited?
There is no known exploitation of CVE-2021-3448 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALPINE-CVE-2021-3448, ALSA-2021:4153, CLEANSTART-2026-EO77574, DEBIAN-CVE-2021-3448, GHSA-vvf4-c8p4-89v5, MGASA-2021-0231 and 6 more.