3 ms·
The author of dnsmasq says it has to be a PTR lookup: https://twitter.com/SimonRKelley/status/914918747978305537 https://twitter.com/SimonRKelley/status/9149187
by agwa 9y ago
The author of dnsmasq says it has to be a PTR lookup: https://twitter.com/SimonRKelley/status/914918747978305537 https://twitter.com/SimonRKelley/status/914918747978305537
That's very good news.
Edit: never mind, he says a CNAME answer to a A/AAAA query can trigger vulnerability. That's very bad news.
- deleted 9y ago[deleted]
- AndyMcConachie 9y agoIf that's true this is really really bad news. I mean I can't even begin to describe how bad this is.
- Ajedi32 9y agoAccording to the blog post, that CVE (CVE-2017-14491) only allows a 2-byte overflow on Dnsmasq >=2.76, so hopefully that's enough to prevent it from being exploited effectively. 2.76 was only released 16 months ago though. There are probably tons of router firmwares out there that are way older than that.
- fulafel 9y agoIt's unlikely that even the latest firmwares follow dnsmasq releases that closely, safe to assume that ~ all CPE devices are wormable. (And most of the devices out there will never get updated even after this, just replaced one day)
- y0ghur7_xxx 9y agoubuntu 16.04.3 uses dnsmasq 2.75