ALAS-2023-1758

Related Vulnerabilities: CVE-2023-28450  

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. (CVE-2023-28450)

ALAS-2023-1758


Amazon Linux AMI Security Advisory: ALAS-2023-1758
Advisory Release Date: 2023-06-05 16:39 Pacific
Advisory Updated Date: 2023-06-08 23:39 Pacific
Severity: Medium

Issue Overview:

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. (CVE-2023-28450)


Affected Packages:

dnsmasq


Issue Correction:
Run yum update dnsmasq to update your system.

New Packages:
i686:
    dnsmasq-2.76-16.17.amzn1.i686
    dnsmasq-debuginfo-2.76-16.17.amzn1.i686
    dnsmasq-utils-2.76-16.17.amzn1.i686

src:
    dnsmasq-2.76-16.17.amzn1.src

x86_64:
    dnsmasq-2.76-16.17.amzn1.x86_64
    dnsmasq-debuginfo-2.76-16.17.amzn1.x86_64
    dnsmasq-utils-2.76-16.17.amzn1.x86_64