Gentoo Archives: gentoo-commits

From: "Mikle Kolyada (zlogene)" <zlogene@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo commit in xml/htdocs/security/en/glsa: glsa-201406-24.xml
Date: Wed, 25 Jun 2014 21:43:41
Message-Id: 20140625213713.6A0672004E@flycatcher.gentoo.org
1 zlogene 14/06/25 21:37:13
2
3 Added: glsa-201406-24.xml
4 Log:
5 GLSA 201406-24
6
7 Revision Changes Path
8 1.1 xml/htdocs/security/en/glsa/glsa-201406-24.xml
9
10 file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201406-24.xml?rev=1.1&view=markup
11 plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201406-24.xml?rev=1.1&content-type=text/plain
12
13 Index: glsa-201406-24.xml
14 ===================================================================
15 <?xml version="1.0" encoding="UTF-8"?>
16 <?xml-stylesheet href="/xsl/glsa.xsl" type="text/xsl"?>
17 <?xml-stylesheet href="/xsl/guide.xsl" type="text/xsl"?>
18 <!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
19 <glsa id="201406-24">
20 <title>Dnsmasq: Denial of Service </title>
21 <synopsis>A vulnerability in Dnsmasq can lead to a Denial of Service
22 condition.
23 </synopsis>
24 <product type="ebuild">dnsmasq</product>
25 <announced>June 25, 2014</announced>
26 <revised>June 25, 2014: 1</revised>
27 <bug>436894</bug>
28 <bug>453170</bug>
29 <access>remote</access>
30 <affected>
31 <package name="net-dns/dnsmasq" auto="yes" arch="*">
32 <unaffected range="ge">2.66</unaffected>
33 <vulnerable range="lt">2.66</vulnerable>
34 </package>
35 </affected>
36 <background>
37 <p>Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP
38 server.
39 </p>
40 </background>
41 <description>
42 <p>When used with certain libvirt configurations Dnsmasq replies to queries
43 from prohibited interfaces.
44 </p>
45 </description>
46 <impact type="normal">
47 <p>A remote attackers can cause a Denial of Service via spoofed TCP based
48 DNS queries.
49 </p>
50 </impact>
51 <workaround>
52 <p>There is no known workaround at this time.</p>
53 </workaround>
54 <resolution>
55 <p>All Dnsmasq users should upgrade to the latest version:</p>
56
57 <code>
58 # emerge --sync
59 # emerge --ask --oneshot --verbose "&gt;=net-dns/dnsmasq-2.66"
60 </code>
61
62 </resolution>
63 <references>
64 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3411">CVE-2012-3411</uri>
65 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0198">CVE-2013-0198</uri>
66 </references>
67 <metadata tag="requester" timestamp="Thu, 19 Jun 2014 03:08:23 +0000">
68 BlueKnight
69 </metadata>
70 <metadata tag="submitter" timestamp="Wed, 25 Jun 2014 21:36:31 +0000">K_F</metadata>
71 </glsa>