The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8070 advisory.

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the dnsmasq-2.85-4.el9 build changelog.

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0083 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-0934:
      A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an     attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.
      CVE-2022-0934:
      A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an     attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the dnsmasq package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dnsmasq package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of dnsmasq installed on the remote host is prior to 2.87. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-269-01 advisory.

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8070 advisory.

  - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker     who sends a crafted packet processed by dnsmasq, potentially causing a denial of service. (CVE-2022-0934)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5408-1 advisory.

    Petr Menk and Richard Johnson discovered that Dnsmasq incorrectly handled certain inputs. An attacker     could possibly use this issue to execute arbitrary code or expose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the dnsmasq package has been released.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0246 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-0934:
      A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an     attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

      CVE-2021-3448:
      A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a     given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network,     able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a     reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The     highest threat from this vulnerability is to data integrity.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202412-10 (Dnsmasq: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Dnsmasq. Please review the CVE identifiers referenced     below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
184560	Rocky Linux 9 : dnsmasq (RLSA-2022:8070)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	high
191348	CentOS 9 : dnsmasq-2.85-4.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high
238769	TencentOS Server 3: dnsmasq (TSSA-2023:0083)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
164226	EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2022-2239)	Nessus	Huawei Local Security Checks	2022/8/17	2022/12/6	high
165382	EulerOS Virtualization 2.9.0 : dnsmasq (EulerOS-SA-2022-2378)	Nessus	Huawei Local Security Checks	2022/9/23	2022/12/2	high
165478	Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current dnsmasq Vulnerability (SSA:2022-269-01)	Nessus	Slackware Local Security Checks	2022/9/26	2022/12/2	high
167966	AlmaLinux 9 : dnsmasq (ALSA-2022:8070)	Nessus	Alma Linux Local Security Checks	2022/11/19	2022/11/24	high
169321	EulerOS Virtualization 2.10.1 : dnsmasq (EulerOS-SA-2022-2882)	Nessus	Huawei Local Security Checks	2022/12/27	2022/12/27	high
169333	EulerOS Virtualization 2.10.0 : dnsmasq (EulerOS-SA-2022-2864)	Nessus	Huawei Local Security Checks	2022/12/27	2022/12/27	high
169518	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Dnsmasq vulnerability (USN-5408-1)	Nessus	Ubuntu Local Security Checks	2023/1/4	2024/8/27	high
203354	Photon OS 4.0: Dnsmasq PHSA-2023-4.0-0352	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	high
238833	TencentOS Server 3: dnsmasq (TSSA-2022:0246)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	medium
212191	GLSA-202412-10 : Dnsmasq: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/12/9	2025/12/24	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

medium

high