Issued:
2017-10-02
Updated:
2017-10-02

RHSA-2017:2838 - Security Advisory

Synopsis

Critical: dnsmasq security update

Type/Severity

Security Advisory: Critical

Topic

An update for dnsmasq is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

  • A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. (CVE-2017-14491)

Red Hat would like to thank Felix Wilhelm (Google Security Team), Fermin J. Serna (Google Security Team), Gabriel Campana (Google Security Team), Kevin Hamacher (Google Security Team), and Ron Bowes (Google Security Team) for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64

Fixes

  • BZ - 1495409 - CVE-2017-14491 dnsmasq: heap overflow in the code responsible for building DNS replies

CVEs

References

Red Hat Enterprise Linux Server 6

SRPM
dnsmasq-2.48-18.el6_9.src.rpm SHA-256: 927b7f556045b6d0f3fb164e9db444181ba96c05770e2b1b947c8e350bbe7861
x86_64
dnsmasq-2.48-18.el6_9.x86_64.rpm SHA-256: 05dc49b44077d602b3c2a856fe043ebc48372fc2bb1f7e84b7ccdd4866513567
dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm SHA-256: 2ba836b3da2eb074a53a3a5e17660b0b891c7aa25c5ae0ee3615a0684469016e
dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm SHA-256: 2ba836b3da2eb074a53a3a5e17660b0b891c7aa25c5ae0ee3615a0684469016e
dnsmasq-utils-2.48-18.el6_9.x86_64.rpm SHA-256: dc4b4a7f4fe70869d73a6b1442f3f3fdc70960ae6582ca83600256765dbaeb9e
i386
dnsmasq-2.48-18.el6_9.i686.rpm SHA-256: 2c8b83cd86c445a846855bfbcc4d1cfd7c333b3bcba7014dd73134c2c35bd137
dnsmasq-debuginfo-2.48-18.el6_9.i686.rpm SHA-256: a12b90596e90b470b0307307974441a633cb7aa38c75b35c4484f0ddeac40175
dnsmasq-debuginfo-2.48-18.el6_9.i686.rpm SHA-256: a12b90596e90b470b0307307974441a633cb7aa38c75b35c4484f0ddeac40175
dnsmasq-utils-2.48-18.el6_9.i686.rpm SHA-256: d973c4d56809ad429aa4096a9aafc75811636dc38385430f3d666eae3379f402

Red Hat Enterprise Linux Workstation 6

SRPM
dnsmasq-2.48-18.el6_9.src.rpm SHA-256: 927b7f556045b6d0f3fb164e9db444181ba96c05770e2b1b947c8e350bbe7861
x86_64
dnsmasq-2.48-18.el6_9.x86_64.rpm SHA-256: 05dc49b44077d602b3c2a856fe043ebc48372fc2bb1f7e84b7ccdd4866513567
dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm SHA-256: 2ba836b3da2eb074a53a3a5e17660b0b891c7aa25c5ae0ee3615a0684469016e
dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm SHA-256: 2ba836b3da2eb074a53a3a5e17660b0b891c7aa25c5ae0ee3615a0684469016e
dnsmasq-utils-2.48-18.el6_9.x86_64.rpm SHA-256: dc4b4a7f4fe70869d73a6b1442f3f3fdc70960ae6582ca83600256765dbaeb9e
i386
dnsmasq-2.48-18.el6_9.i686.rpm SHA-256: 2c8b83cd86c445a846855bfbcc4d1cfd7c333b3bcba7014dd73134c2c35bd137
dnsmasq-debuginfo-2.48-18.el6_9.i686.rpm SHA-256: a12b90596e90b470b0307307974441a633cb7aa38c75b35c4484f0ddeac40175
dnsmasq-debuginfo-2.48-18.el6_9.i686.rpm SHA-256: a12b90596e90b470b0307307974441a633cb7aa38c75b35c4484f0ddeac40175
dnsmasq-utils-2.48-18.el6_9.i686.rpm SHA-256: d973c4d56809ad429aa4096a9aafc75811636dc38385430f3d666eae3379f402

Red Hat Enterprise Linux Desktop 6

SRPM
dnsmasq-2.48-18.el6_9.src.rpm SHA-256: 927b7f556045b6d0f3fb164e9db444181ba96c05770e2b1b947c8e350bbe7861
x86_64
dnsmasq-2.48-18.el6_9.x86_64.rpm SHA-256: 05dc49b44077d602b3c2a856fe043ebc48372fc2bb1f7e84b7ccdd4866513567
dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm SHA-256: 2ba836b3da2eb074a53a3a5e17660b0b891c7aa25c5ae0ee3615a0684469016e
dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm SHA-256: 2ba836b3da2eb074a53a3a5e17660b0b891c7aa25c5ae0ee3615a0684469016e
dnsmasq-utils-2.48-18.el6_9.x86_64.rpm SHA-256: dc4b4a7f4fe70869d73a6b1442f3f3fdc70960ae6582ca83600256765dbaeb9e
i386
dnsmasq-2.48-18.el6_9.i686.rpm SHA-256: 2c8b83cd86c445a846855bfbcc4d1cfd7c333b3bcba7014dd73134c2c35bd137
dnsmasq-debuginfo-2.48-18.el6_9.i686.rpm SHA-256: a12b90596e90b470b0307307974441a633cb7aa38c75b35c4484f0ddeac40175
dnsmasq-debuginfo-2.48-18.el6_9.i686.rpm SHA-256: a12b90596e90b470b0307307974441a633cb7aa38c75b35c4484f0ddeac40175
dnsmasq-utils-2.48-18.el6_9.i686.rpm SHA-256: d973c4d56809ad429aa4096a9aafc75811636dc38385430f3d666eae3379f402

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
dnsmasq-2.48-18.el6_9.src.rpm SHA-256: 927b7f556045b6d0f3fb164e9db444181ba96c05770e2b1b947c8e350bbe7861
s390x
dnsmasq-2.48-18.el6_9.s390x.rpm SHA-256: d62a27ba0058802da34053da75d0e389433464c4888be1f548bd09c154e270d5
dnsmasq-debuginfo-2.48-18.el6_9.s390x.rpm SHA-256: 57a6857cb43c00f4878e4e02ab2f044a9cc70a273011077f6cec5173dbe6c8df
dnsmasq-debuginfo-2.48-18.el6_9.s390x.rpm SHA-256: 57a6857cb43c00f4878e4e02ab2f044a9cc70a273011077f6cec5173dbe6c8df
dnsmasq-utils-2.48-18.el6_9.s390x.rpm SHA-256: 8c816225ebc5bef423a5f917936fef425c38b55ebd015db5254d3e659b147651

Red Hat Enterprise Linux for Power, big endian 6

SRPM
dnsmasq-2.48-18.el6_9.src.rpm SHA-256: 927b7f556045b6d0f3fb164e9db444181ba96c05770e2b1b947c8e350bbe7861
ppc64
dnsmasq-2.48-18.el6_9.ppc64.rpm SHA-256: 2464e8b04f28606333a7fe4e5c8a23dedf043398bd0bac3ad76914800b2c5bb8
dnsmasq-debuginfo-2.48-18.el6_9.ppc64.rpm SHA-256: 80caa2910c4998c37f17c4f7305950d6d5eb11f914c3625890c4ab5bb133dd78
dnsmasq-debuginfo-2.48-18.el6_9.ppc64.rpm SHA-256: 80caa2910c4998c37f17c4f7305950d6d5eb11f914c3625890c4ab5bb133dd78
dnsmasq-utils-2.48-18.el6_9.ppc64.rpm SHA-256: 9f53c96526c2a73dfc11fb542abecbe308777c4397bc438f539edc1b495b405a

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
dnsmasq-2.48-18.el6_9.src.rpm SHA-256: 927b7f556045b6d0f3fb164e9db444181ba96c05770e2b1b947c8e350bbe7861
x86_64
dnsmasq-2.48-18.el6_9.x86_64.rpm SHA-256: 05dc49b44077d602b3c2a856fe043ebc48372fc2bb1f7e84b7ccdd4866513567
dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm SHA-256: 2ba836b3da2eb074a53a3a5e17660b0b891c7aa25c5ae0ee3615a0684469016e
dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm SHA-256: 2ba836b3da2eb074a53a3a5e17660b0b891c7aa25c5ae0ee3615a0684469016e
dnsmasq-utils-2.48-18.el6_9.x86_64.rpm SHA-256: dc4b4a7f4fe70869d73a6b1442f3f3fdc70960ae6582ca83600256765dbaeb9e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.