https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:04:25.369106+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-3448 CVE-2021-3448 2026-09-28T13:04:25.484048+00:00

Affected: dnsmasq

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

 https://vulnerability.circl.lu/vuln/usn-4976-1 USN-4976-1 — dnsmasq vulnerability 2026-09-28T13:04:25.484183+00:00

Affected: Ubuntu:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq

Petr Mensik discovered that Dnsmasq incorrectly randomized source ports in certain configurations. A remote attacker could possibly use this issue to facilitate DNS cache poisoning attacks.