CVE-2023-28450

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-28450
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://capec.mitre.org/data/definitions/495.html Not Applicable
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/
https://thekelleys.org.uk/dnsmasq/doc.html Product
https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=blob%3Bf=CHANGELOG
https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5
Configurations

Configuration 1 (hide)

cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*
History

17 Apr 2023, 03:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/ -
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/ -

21 Mar 2023, 19:24

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CPE cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*
References (MISC) https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob;f=CHANGELOG - (MISC) https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob;f=CHANGELOG - Release Notes
References (MISC) https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5 - (MISC) https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5 - Patch
References (MISC) https://capec.mitre.org/data/definitions/495.html - (MISC) https://capec.mitre.org/data/definitions/495.html - Not Applicable
References (MISC) https://thekelleys.org.uk/dnsmasq/doc.html - (MISC) https://thekelleys.org.uk/dnsmasq/doc.html - Product

15 Mar 2023, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-03-15 21:15

Updated : 2024-02-04 23:14

NVD link : CVE-2023-28450

Mitre link : CVE-2023-28450

CVE.ORG link : CVE-2023-28450

JSON object : View

Products Affected

thekelleys

  • dnsmasq
CWE
NVD-CWE-noinfo