According to the versions of the dnsmasq package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dnsmasq package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of dnsmasq installed on the remote host is prior to 2.87. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-269-01 advisory.

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the dnsmasq package has been released.

The remote host is affected by the vulnerability described in GLSA-202412-10 (Dnsmasq: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Dnsmasq. Please review the CVE identifiers referenced     below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8070 advisory.

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5408-1 advisory.

    Petr Menk and Richard Johnson discovered that Dnsmasq incorrectly handled certain inputs. An attacker     could possibly use this issue to execute arbitrary code or expose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0246 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-0934:
      A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an     attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

      CVE-2021-3448:
      A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a     given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network,     able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a     reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The     highest threat from this vulnerability is to data integrity.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7633 advisory.

    The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic     Host Configuration Protocol) server.

    Security Fix(es):

    * dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3974 advisory.

    -lts-announce@lists.debian.org     Subject: [SECURITY] [DLA 3974-1] dnsmasq security update

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3974-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Lee Garrett     November 29, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : dnsmasq     Version        : 2.85-1+deb11u1     CVE ID         : CVE-2022-0934 CVE-2023-28450 CVE-2023-50387 CVE-2023-50868     Debian Bug     :

    Brief introduction

    CVE-2022-0934

        A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq.
        This flaw allows an attacker who sends a crafted packet processed by         dnsmasq, potentially causing a denial of service.

    CVE-2023-28450

        An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0         UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day         2020.

    CVE-2023-50387

        Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840,         and related RFCs) allow remote attackers to cause a denial of service (CPU         consumption) via one or more DNSSEC responses, aka the KeyTrap issue. One         of the concerns is that, when there is a zone with many DNSKEY and RRSIG         records, the protocol specification implies that an algorithm must evaluate         all combinations of DNSKEY and RRSIG records.

    CVE-2023-50868

        The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC         9276 guidance is skipped) allows remote attackers to cause a denial of         service (CPU consumption for SHA-1 computations) via DNSSEC responses in a         random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification         implies that an algorithm must perform thousands of iterations of a hash         function in certain situations.

    For Debian 11 bullseye, these problems have been fixed in version     2.85-1+deb11u1.

    We recommend that you upgrade your dnsmasq packages.

    For the detailed security status of dnsmasq please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/dnsmasq

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0024 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-0934:
    A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
164226	EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2022-2239)	Nessus	Huawei Local Security Checks	2022/8/17	2022/12/6	high
165382	EulerOS Virtualization 2.9.0 : dnsmasq (EulerOS-SA-2022-2378)	Nessus	Huawei Local Security Checks	2022/9/23	2022/12/2	high
165478	Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current dnsmasq Vulnerability (SSA:2022-269-01)	Nessus	Slackware Local Security Checks	2022/9/26	2022/12/2	high
169321	EulerOS Virtualization 2.10.1 : dnsmasq (EulerOS-SA-2022-2882)	Nessus	Huawei Local Security Checks	2022/12/27	2022/12/27	high
169333	EulerOS Virtualization 2.10.0 : dnsmasq (EulerOS-SA-2022-2864)	Nessus	Huawei Local Security Checks	2022/12/27	2022/12/27	high
203354	Photon OS 4.0: Dnsmasq PHSA-2023-4.0-0352	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	high
212191	GLSA-202412-10 : Dnsmasq: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/12/9	2025/12/24	high
167966	AlmaLinux 9 : dnsmasq (ALSA-2022:8070)	Nessus	Alma Linux Local Security Checks	2022/11/19	2022/11/24	high
169518	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Dnsmasq vulnerability (USN-5408-1)	Nessus	Ubuntu Local Security Checks	2023/1/4	2024/8/27	high
238833	TencentOS Server 3: dnsmasq (TSSA-2022:0246)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	medium
162875	EulerOS 2.0 SP9 : dnsmasq (EulerOS-SA-2022-1992)	Nessus	Huawei Local Security Checks	2022/7/8	2023/3/21	high
162889	EulerOS 2.0 SP9 : dnsmasq (EulerOS-SA-2022-1962)	Nessus	Huawei Local Security Checks	2022/7/8	2023/3/21	high
164212	EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2022-2252)	Nessus	Huawei Local Security Checks	2022/8/17	2022/12/7	high
165945	EulerOS Virtualization 3.0.6.0 : dnsmasq (EulerOS-SA-2022-2553)	Nessus	Huawei Local Security Checks	2022/10/10	2022/11/29	high
167173	RHEL 8 : dnsmasq (RHSA-2022:7633)	Nessus	Red Hat Local Security Checks	2022/11/9	2024/11/7	high
211973	Debian dla-3974 : dnsmasq - security update	Nessus	Debian Local Security Checks	2024/11/30	2025/12/24	high
236715	Alibaba Cloud Linux 3 : 0024: dnsmasq (ALINUX3-SA-2023:0024)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

medium

high

high

high

high

high

high

high