Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux dnsmasq can crash or be misused
published 3 years ago
Summary
The dnsmasq service on AlmaLinux, which handles DNS lookups and network address assignments, has a memory handling flaw that could cause it to stop working or be taken over by an attacker. Update the dnsmasq and dnsmasq-utils packages to the latest versions to fix the issue and keep your network services reliable.
What to do
- Update almalinux dnsmasq to version 2.79-24.el8.
- Update almalinux dnsmasq-utils to version 2.79-24.el8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | dnsmasq |
< 2.79-24.el8 Fix: upgrade to 2.79-24.el8
|
| AlmaLinux:8 | almalinux | dnsmasq-utils |
< 2.79-24.el8 Fix: upgrade to 2.79-24.el8
|
Original advisory text
Moderate: dnsmasq security and bug fix update
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.
Security Fix(es):
* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Security Fix(es):
* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
References
- https://access.redhat.com/errata/RHSA-2022:7633 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-0934 Third Party Advisory
- https://bugzilla.redhat.com/2057075 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2022-7633.html Vendor Advisory
Timeline
Published8 Nov 2022
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2022:7633 · OSV
Track software like this
Free during beta