CVE-2021-3448: fedoraproject fedora

Vulnerability summary

CVE-2021-3448 is a medium (CVSS 4.3) vulnerability in fedoraproject fedora. EPSS estimates a 2.28% chance of exploitation in the next 30 days, higher than 82.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 08-04-2021
   PublishedVulnerability first disclosed.
2. 03-12-2025
   Last modifiedVulnerability information updated.

Description

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

• CWE-358Improperly Implemented Security Check for StandardThe product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.