DSA-1876-1 dnsmasq -- buffer overflow

Debian Security Advisory

DSA-1876-1 dnsmasq -- buffer overflow

Date Reported:

01 Sep 2009

Affected Packages:

dnsmasq

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2009-2957, CVE-2009-2958.

More information:

Several remote vulnerabilities have been discovered in the TFTP component of dnsmasq. The Common Vulnerabilities and Exposures project identifies the following problems:

• CVE-2009-2957

  A buffer overflow in TFTP processing may enable arbitrary code execution to attackers which are permitted to use the TFTP service.

• CVE-2009-2958

  Malicious TFTP clients may crash dnsmasq, leading to denial of service.

The old stable distribution is not affected by these problems.

For the stable distribution (lenny), these problems have been fixed in version 2.45-1+lenny1.

For the unstable distribution (sid), these problems have been fixed in version 2.50-1.

We recommend that you upgrade your dnsmasq packages.

Fixed in:

Debian GNU/Linux 5.0 (lenny)

Source:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq_2.45.orig.tar.gz

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq_2.45-1+lenny1.diff.gz

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq_2.45-1+lenny1.dsc

Architecture-independent component:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq_2.45-1+lenny1_all.deb

Alpha:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_alpha.deb

AMD64:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_amd64.deb

ARM:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_arm.deb

ARM EABI:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_armel.deb

HP Precision:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_hppa.deb

Intel IA-32:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_i386.deb

Intel IA-64:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_ia64.deb

Big-endian MIPS:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_mips.deb

Little-endian MIPS:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_mipsel.deb

PowerPC:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_powerpc.deb

IBM S/390:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_s390.deb

Sun Sparc:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_sparc.deb

MD5 checksums of the listed files are available in the original advisory.