Red Hat: CVE-2023-28450: dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (Multiple Advisories)

Red Hat: CVE-2023-28450: dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (Multiple Advisories)

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

03/15/2023

Created

11/09/2023

Added

11/08/2023

Modified

01/28/2025

Description

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

Solution(s)

• redhat-upgrade-dnsmasq
• redhat-upgrade-dnsmasq-debuginfo
• redhat-upgrade-dnsmasq-debugsource
• redhat-upgrade-dnsmasq-utils
• redhat-upgrade-dnsmasq-utils-debuginfo

References

• CVE-2023-28450
• RHSA-2023:6524
• RHSA-2023:7046
• RHSA-2024:1544
• RHSA-2024:1545
• RHSA-2024:4052