https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:04:24 +0000 https://vulnerability.circl.lu/vuln/cve-2021-3448 <p><strong>Affected:</strong> dnsmasq</p> <p>A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.</p> <p><strong>Affected:</strong> dnsmasq</p> <p>A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.</p> https://vulnerability.circl.lu/vuln/cve-2021-3448 https://vulnerability.circl.lu/vuln/usn-4976-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq</p> <p>Petr Mensik discovered that Dnsmasq incorrectly randomized source ports in certain configurations. A remote attacker could possibly use this issue to facilitate DNS cache poisoning attacks.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq</p> <p>Petr Mensik discovered that Dnsmasq incorrectly randomized source ports in certain configurations. A remote attacker could possibly use this issue to facilitate DNS cache poisoning attacks.</p> https://vulnerability.circl.lu/vuln/usn-4976-1