Dnsmasq Vulnerabilities Can Be Used to Exploit DNS
NJCCIC Advisory
Original Release Date: 1/21/2021
Summary
JSOF, an Israeli security firm, disclosed seven Dnsmasq vulnerabilities – collectively referred to as DNSpooq – that can be exploited in DNS cache poisoning, remote code execution, and denial-of-service attacks. The JSOF advisory details several major vendors that use the Dnsmasq software in their products.
Recommendations
The NJCCIC advises reviewing the JSOF whitepaper and updating to version 2.83 of Dnsmasq or applying the partial workarounds if updating is not feasible.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.