USN-6034-1: Dnsmasq vulnerability

Published Apr 20, 2023
·
Updated

It was discovered that Dnsmasq was sending large DNS messages over UDP, possibly causing transmission failures due to IP fragmentation. This update lowers the default maximum size of DNS messages to improve transmission reliability over UDP.

Affected Software

12 affected componentsFixes available
All of the following
ubuntu/dnsmasq-base<2.86-1.1ubuntu2.1
2.86-1.1ubuntu2.1
Ubuntu Ubuntu=22.10
All of the following
ubuntu/dnsmasq-base<2.86-1.1ubuntu0.3
2.86-1.1ubuntu0.3
Ubuntu Ubuntu=22.04
All of the following
ubuntu/dnsmasq-base<2.80-1.1ubuntu1.7
2.80-1.1ubuntu1.7
Ubuntu Ubuntu=20.04
All of the following
ubuntu/dnsmasq-base<2.79-1ubuntu0.7
2.79-1ubuntu0.7
Ubuntu Ubuntu=18.04
All of the following
ubuntu/dnsmasq-base<2.79-1ubuntu0.16.04.1+esm2
2.79-1ubuntu0.16.04.1+esm2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/dnsmasq-base<2.68-1ubuntu0.2+esm2
2.68-1ubuntu0.2+esm2
Ubuntu Ubuntu=14.04

Event History

Apr 20, 2023
Advisory Published
via Ubuntu·12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of USN-6034-1?

USN-6034-1 addresses a potential issue with Dnsmasq that could lead to transmission failures due to large DNS messages.

2

How do I fix USN-6034-1?

To fix USN-6034-1, update the dnsmasq-base package to a patched version such as 2.86-1.1ubuntu2.1 for Ubuntu 22.10.

3

Which versions of Ubuntu are affected by USN-6034-1?

USN-6034-1 affects Ubuntu versions 14.04, 16.04, 18.04, 20.04, 22.04, and 22.10 with specific dnsmasq-base versions.

4

What are the potential risks associated with USN-6034-1 if not addressed?

If USN-6034-1 is not addressed, users may experience unreliable DNS message transmission and service interruptions.

5

Is there a specific package version to upgrade for USN-6034-1?

Yes, the recommended versions to upgrade to include dnsmasq-base 2.86-1.1ubuntu2.1 for Ubuntu 22.10.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203