dnsmasq Denial-of-Service Vulnerability in DNSSEC Validation

A denial-of-service vulnerability has been identified in dnsmasq's DNSSEC validation process. This vulnerability allows remote attackers to cause the dnsmasq process to enter an infinite loop, leading to a denial-of-service condition. The issue arises from the improper handling of crafted DNS packets, which can cause the dnsmasq service to become unresponsive.

Impact

Exploitation of this vulnerability causes the dnsmasq process to crash or become unresponsive, disrupting DNS resolution and affecting services that rely on it.

Remediation

dnsmasq has released version 2.92rel2 to address this vulnerability. Users should upgrade to this version.