Dnsmasq是一款使用C语言编写的轻量级DNS转发和DHCP、TFTP服务器。
Dnsmasq 存在缓冲区错误漏洞，该漏洞源于dnsmasq中的基于堆的缓冲区溢出，在未经请求的DNS响应中使用DNSSEC数据验证rrset之前，对rrset进行排序。
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：
https://www.jsof-tech.com/disclosures/dnspooq/
来源:MISC
链接:https://bugzilla.redhat.com/show_bug.cgi?id=1881875
来源:MISC
链接:https://www.jsof-tech.com/disclosures/dnspooq/
来源:DEBIAN
链接:https://www.debian.org/security/2021/dsa-4844
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGB7HL3OWHTLEPSMLDGOMXQKG3KM2QME/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYW3IR6APUSKOYKL5FT3ACTIHWHGQY32/
来源:GENTOO
链接:https://security.gentoo.org/glsa/202101-17
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0692
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0420
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0231/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/161085/Gentoo-Linux-Security-Advisory-202101-17.html
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2020-25681
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/161269/Red-Hat-Security-Advisory-2021-0281-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0699
来源:www.huawei.com
链接:https://www.huawei.com/cn/psirt/security-notices/huawei-sn-20210120-01-dnspooq-cn
