SB2024020887 - Origin validation error in Dnsmasq
Published: February 8, 2024 Updated: June 8, 2025
Security Bulletin ID
SB2024020887
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Origin validation error (CVE-ID: CVE-2005-0877)
The vulnerability allows a remote non-authenticated attacker to manipulate data.
Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.
Remediation
Install update from vendor's website.