CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25686

A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 queries for the same name. This flaw allows an off-path attacker on the network to substantially reduce the number of attempts that it would have to perform to forge a reply and have it accepted by dnsmasq. This issue is mentioned in the "Birthday Attacks" section of RFC5452. If chained with CVE-2020-25684, the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 56.6%

CVSS Severity

CVSS v3 Score 3.7

CVSS v2 Score 4.3

References

Products affected by CVE-2020-25686

Thekelleys » Dnsmasq » Version: N/A

cpe:2.3:a:thekelleys:dnsmasq:-
Thekelleys » Dnsmasq » Version: 0.4

cpe:2.3:a:thekelleys:dnsmasq:0.4
Thekelleys » Dnsmasq » Version: 0.5

cpe:2.3:a:thekelleys:dnsmasq:0.5
Thekelleys » Dnsmasq » Version: 0.6

cpe:2.3:a:thekelleys:dnsmasq:0.6
Thekelleys » Dnsmasq » Version: 0.7

cpe:2.3:a:thekelleys:dnsmasq:0.7
Thekelleys » Dnsmasq » Version: 0.95

cpe:2.3:a:thekelleys:dnsmasq:0.95
Thekelleys » Dnsmasq » Version: 0.96

cpe:2.3:a:thekelleys:dnsmasq:0.96
Thekelleys » Dnsmasq » Version: 0.98

cpe:2.3:a:thekelleys:dnsmasq:0.98
Thekelleys » Dnsmasq » Version: 0.992

cpe:2.3:a:thekelleys:dnsmasq:0.992
Thekelleys » Dnsmasq » Version: 0.996

cpe:2.3:a:thekelleys:dnsmasq:0.996
Thekelleys » Dnsmasq » Version: 1.0

cpe:2.3:a:thekelleys:dnsmasq:1.0
Thekelleys » Dnsmasq » Version: 1.10

cpe:2.3:a:thekelleys:dnsmasq:1.10
Thekelleys » Dnsmasq » Version: 1.11

cpe:2.3:a:thekelleys:dnsmasq:1.11
Thekelleys » Dnsmasq » Version: 1.12

cpe:2.3:a:thekelleys:dnsmasq:1.12
Thekelleys » Dnsmasq » Version: 1.13

cpe:2.3:a:thekelleys:dnsmasq:1.13
Thekelleys » Dnsmasq » Version: 1.14

cpe:2.3:a:thekelleys:dnsmasq:1.14
Thekelleys » Dnsmasq » Version: 1.15

cpe:2.3:a:thekelleys:dnsmasq:1.15
Thekelleys » Dnsmasq » Version: 1.16

cpe:2.3:a:thekelleys:dnsmasq:1.16
Thekelleys » Dnsmasq » Version: 1.17

cpe:2.3:a:thekelleys:dnsmasq:1.17
Thekelleys » Dnsmasq » Version: 1.18

cpe:2.3:a:thekelleys:dnsmasq:1.18
Thekelleys » Dnsmasq » Version: 1.2

cpe:2.3:a:thekelleys:dnsmasq:1.2
Thekelleys » Dnsmasq » Version: 1.3

cpe:2.3:a:thekelleys:dnsmasq:1.3
Thekelleys » Dnsmasq » Version: 1.4

cpe:2.3:a:thekelleys:dnsmasq:1.4
Thekelleys » Dnsmasq » Version: 1.5

cpe:2.3:a:thekelleys:dnsmasq:1.5
Thekelleys » Dnsmasq » Version: 1.6

cpe:2.3:a:thekelleys:dnsmasq:1.6
Thekelleys » Dnsmasq » Version: 1.7

cpe:2.3:a:thekelleys:dnsmasq:1.7
Thekelleys » Dnsmasq » Version: 1.8

cpe:2.3:a:thekelleys:dnsmasq:1.8
Thekelleys » Dnsmasq » Version: 1.9

cpe:2.3:a:thekelleys:dnsmasq:1.9
Thekelleys » Dnsmasq » Version: 2.0

cpe:2.3:a:thekelleys:dnsmasq:2.0
Thekelleys » Dnsmasq » Version: 2.1

cpe:2.3:a:thekelleys:dnsmasq:2.1
Thekelleys » Dnsmasq » Version: 2.10

cpe:2.3:a:thekelleys:dnsmasq:2.10
Thekelleys » Dnsmasq » Version: 2.11

cpe:2.3:a:thekelleys:dnsmasq:2.11
Thekelleys » Dnsmasq » Version: 2.12

cpe:2.3:a:thekelleys:dnsmasq:2.12
Thekelleys » Dnsmasq » Version: 2.13

cpe:2.3:a:thekelleys:dnsmasq:2.13
Thekelleys » Dnsmasq » Version: 2.14

cpe:2.3:a:thekelleys:dnsmasq:2.14
Thekelleys » Dnsmasq » Version: 2.15

cpe:2.3:a:thekelleys:dnsmasq:2.15
Thekelleys » Dnsmasq » Version: 2.16

cpe:2.3:a:thekelleys:dnsmasq:2.16
Thekelleys » Dnsmasq » Version: 2.17

cpe:2.3:a:thekelleys:dnsmasq:2.17
Thekelleys » Dnsmasq » Version: 2.18

cpe:2.3:a:thekelleys:dnsmasq:2.18
Thekelleys » Dnsmasq » Version: 2.19

cpe:2.3:a:thekelleys:dnsmasq:2.19
Thekelleys » Dnsmasq » Version: 2.2

cpe:2.3:a:thekelleys:dnsmasq:2.2
Thekelleys » Dnsmasq » Version: 2.20

cpe:2.3:a:thekelleys:dnsmasq:2.20
Thekelleys » Dnsmasq » Version: 2.21

cpe:2.3:a:thekelleys:dnsmasq:2.21
Thekelleys » Dnsmasq » Version: 2.22

cpe:2.3:a:thekelleys:dnsmasq:2.22
Thekelleys » Dnsmasq » Version: 2.23

cpe:2.3:a:thekelleys:dnsmasq:2.23
Thekelleys » Dnsmasq » Version: 2.24

cpe:2.3:a:thekelleys:dnsmasq:2.24
Thekelleys » Dnsmasq » Version: 2.25

cpe:2.3:a:thekelleys:dnsmasq:2.25
Thekelleys » Dnsmasq » Version: 2.26

cpe:2.3:a:thekelleys:dnsmasq:2.26
Thekelleys » Dnsmasq » Version: 2.27

cpe:2.3:a:thekelleys:dnsmasq:2.27
Thekelleys » Dnsmasq » Version: 2.28

cpe:2.3:a:thekelleys:dnsmasq:2.28
Thekelleys » Dnsmasq » Version: 2.29

cpe:2.3:a:thekelleys:dnsmasq:2.29
Thekelleys » Dnsmasq » Version: 2.3

cpe:2.3:a:thekelleys:dnsmasq:2.3
Thekelleys » Dnsmasq » Version: 2.30

cpe:2.3:a:thekelleys:dnsmasq:2.30
Thekelleys » Dnsmasq » Version: 2.31

cpe:2.3:a:thekelleys:dnsmasq:2.31
Thekelleys » Dnsmasq » Version: 2.33

cpe:2.3:a:thekelleys:dnsmasq:2.33
Thekelleys » Dnsmasq » Version: 2.34

cpe:2.3:a:thekelleys:dnsmasq:2.34
Thekelleys » Dnsmasq » Version: 2.35

cpe:2.3:a:thekelleys:dnsmasq:2.35
Thekelleys » Dnsmasq » Version: 2.36

cpe:2.3:a:thekelleys:dnsmasq:2.36
Thekelleys » Dnsmasq » Version: 2.37

cpe:2.3:a:thekelleys:dnsmasq:2.37
Thekelleys » Dnsmasq » Version: 2.38

cpe:2.3:a:thekelleys:dnsmasq:2.38
Thekelleys » Dnsmasq » Version: 2.39

cpe:2.3:a:thekelleys:dnsmasq:2.39
Thekelleys » Dnsmasq » Version: 2.4

cpe:2.3:a:thekelleys:dnsmasq:2.4
Thekelleys » Dnsmasq » Version: 2.40

cpe:2.3:a:thekelleys:dnsmasq:2.40
Thekelleys » Dnsmasq » Version: 2.41

cpe:2.3:a:thekelleys:dnsmasq:2.41
Thekelleys » Dnsmasq » Version: 2.42

cpe:2.3:a:thekelleys:dnsmasq:2.42
Thekelleys » Dnsmasq » Version: 2.43

cpe:2.3:a:thekelleys:dnsmasq:2.43
Thekelleys » Dnsmasq » Version: 2.44

cpe:2.3:a:thekelleys:dnsmasq:2.44
Thekelleys » Dnsmasq » Version: 2.45

cpe:2.3:a:thekelleys:dnsmasq:2.45
Thekelleys » Dnsmasq » Version: 2.46

cpe:2.3:a:thekelleys:dnsmasq:2.46
Thekelleys » Dnsmasq » Version: 2.47

cpe:2.3:a:thekelleys:dnsmasq:2.47
Thekelleys » Dnsmasq » Version: 2.48

cpe:2.3:a:thekelleys:dnsmasq:2.48
Thekelleys » Dnsmasq » Version: 2.49

cpe:2.3:a:thekelleys:dnsmasq:2.49
Thekelleys » Dnsmasq » Version: 2.5

cpe:2.3:a:thekelleys:dnsmasq:2.5
Thekelleys » Dnsmasq » Version: 2.50

cpe:2.3:a:thekelleys:dnsmasq:2.50
Thekelleys » Dnsmasq » Version: 2.51

cpe:2.3:a:thekelleys:dnsmasq:2.51
Thekelleys » Dnsmasq » Version: 2.52

cpe:2.3:a:thekelleys:dnsmasq:2.52
Thekelleys » Dnsmasq » Version: 2.53

cpe:2.3:a:thekelleys:dnsmasq:2.53
Thekelleys » Dnsmasq » Version: 2.54

cpe:2.3:a:thekelleys:dnsmasq:2.54
Thekelleys » Dnsmasq » Version: 2.55

cpe:2.3:a:thekelleys:dnsmasq:2.55
Thekelleys » Dnsmasq » Version: 2.56

cpe:2.3:a:thekelleys:dnsmasq:2.56
Thekelleys » Dnsmasq » Version: 2.57

cpe:2.3:a:thekelleys:dnsmasq:2.57
Thekelleys » Dnsmasq » Version: 2.58

cpe:2.3:a:thekelleys:dnsmasq:2.58
Thekelleys » Dnsmasq » Version: 2.59

cpe:2.3:a:thekelleys:dnsmasq:2.59
Thekelleys » Dnsmasq » Version: 2.6

cpe:2.3:a:thekelleys:dnsmasq:2.6
Thekelleys » Dnsmasq » Version: 2.60

cpe:2.3:a:thekelleys:dnsmasq:2.60
Thekelleys » Dnsmasq » Version: 2.61

cpe:2.3:a:thekelleys:dnsmasq:2.61
Thekelleys » Dnsmasq » Version: 2.62

cpe:2.3:a:thekelleys:dnsmasq:2.62
Thekelleys » Dnsmasq » Version: 2.63

cpe:2.3:a:thekelleys:dnsmasq:2.63
Thekelleys » Dnsmasq » Version: 2.64

cpe:2.3:a:thekelleys:dnsmasq:2.64
Thekelleys » Dnsmasq » Version: 2.65

cpe:2.3:a:thekelleys:dnsmasq:2.65
Thekelleys » Dnsmasq » Version: 2.66

cpe:2.3:a:thekelleys:dnsmasq:2.66
Thekelleys » Dnsmasq » Version: 2.67

cpe:2.3:a:thekelleys:dnsmasq:2.67
Thekelleys » Dnsmasq » Version: 2.68

cpe:2.3:a:thekelleys:dnsmasq:2.68
Thekelleys » Dnsmasq » Version: 2.69

cpe:2.3:a:thekelleys:dnsmasq:2.69
Thekelleys » Dnsmasq » Version: 2.7

cpe:2.3:a:thekelleys:dnsmasq:2.7
Thekelleys » Dnsmasq » Version: 2.70

cpe:2.3:a:thekelleys:dnsmasq:2.70
Thekelleys » Dnsmasq » Version: 2.71

cpe:2.3:a:thekelleys:dnsmasq:2.71
Thekelleys » Dnsmasq » Version: 2.72

cpe:2.3:a:thekelleys:dnsmasq:2.72
Thekelleys » Dnsmasq » Version: 2.73

cpe:2.3:a:thekelleys:dnsmasq:2.73
Thekelleys » Dnsmasq » Version: 2.74

cpe:2.3:a:thekelleys:dnsmasq:2.74
Thekelleys » Dnsmasq » Version: 2.75

cpe:2.3:a:thekelleys:dnsmasq:2.75
Thekelleys » Dnsmasq » Version: 2.76

cpe:2.3:a:thekelleys:dnsmasq:2.76
Thekelleys » Dnsmasq » Version: 2.77

cpe:2.3:a:thekelleys:dnsmasq:2.77
Thekelleys » Dnsmasq » Version: 2.78

cpe:2.3:a:thekelleys:dnsmasq:2.78
Thekelleys » Dnsmasq » Version: 2.79

cpe:2.3:a:thekelleys:dnsmasq:2.79
Thekelleys » Dnsmasq » Version: 2.8

cpe:2.3:a:thekelleys:dnsmasq:2.8
Thekelleys » Dnsmasq » Version: 2.80

cpe:2.3:a:thekelleys:dnsmasq:2.80
Thekelleys » Dnsmasq » Version: 2.81

cpe:2.3:a:thekelleys:dnsmasq:2.81
Thekelleys » Dnsmasq » Version: 2.82

cpe:2.3:a:thekelleys:dnsmasq:2.82
Thekelleys » Dnsmasq » Version: 2.9

cpe:2.3:a:thekelleys:dnsmasq:2.9
Arista » Eos » Version: 4.21

cpe:2.3:o:arista:eos:4.21
Arista » Eos » Version: 4.21.0

cpe:2.3:o:arista:eos:4.21.0
Arista » Eos » Version: 4.21.0f

cpe:2.3:o:arista:eos:4.21.0f
Arista » Eos » Version: 4.21.11m

cpe:2.3:o:arista:eos:4.21.11m
Arista » Eos » Version: 4.21.12m

cpe:2.3:o:arista:eos:4.21.12m
Arista » Eos » Version: 4.21.13m

cpe:2.3:o:arista:eos:4.21.13m
Arista » Eos » Version: 4.21.1f

cpe:2.3:o:arista:eos:4.21.1f
Arista » Eos » Version: 4.21.2.4

cpe:2.3:o:arista:eos:4.21.2.4
Arista » Eos » Version: 4.21.3

cpe:2.3:o:arista:eos:4.21.3
Arista » Eos » Version: 4.21.3f

cpe:2.3:o:arista:eos:4.21.3f
Arista » Eos » Version: 4.21.4.1f

cpe:2.3:o:arista:eos:4.21.4.1f
Arista » Eos » Version: 4.21.8

cpe:2.3:o:arista:eos:4.21.8
Arista » Eos » Version: 4.21.8m

cpe:2.3:o:arista:eos:4.21.8m
Arista » Eos » Version: 4.21.9m

cpe:2.3:o:arista:eos:4.21.9m
Arista » Eos » Version: 4.22

cpe:2.3:o:arista:eos:4.22
Arista » Eos » Version: 4.22.0f

cpe:2.3:o:arista:eos:4.22.0f
Arista » Eos » Version: 4.22.1f

cpe:2.3:o:arista:eos:4.22.1f
Arista » Eos » Version: 4.22.3m

cpe:2.3:o:arista:eos:4.22.3m
Arista » Eos » Version: 4.22.4m

cpe:2.3:o:arista:eos:4.22.4m
Arista » Eos » Version: 4.22.6m

cpe:2.3:o:arista:eos:4.22.6m
Arista » Eos » Version: 4.22.7m

cpe:2.3:o:arista:eos:4.22.7m
Arista » Eos » Version: 4.22.8.1f

cpe:2.3:o:arista:eos:4.22.8.1f
Arista » Eos » Version: 4.23

cpe:2.3:o:arista:eos:4.23
Arista » Eos » Version: 4.23.0f

cpe:2.3:o:arista:eos:4.23.0f
Arista » Eos » Version: 4.23.1f

cpe:2.3:o:arista:eos:4.23.1f
Arista » Eos » Version: 4.23.2f

cpe:2.3:o:arista:eos:4.23.2f
Arista » Eos » Version: 4.23.3m

cpe:2.3:o:arista:eos:4.23.3m
Arista » Eos » Version: 4.23.4m

cpe:2.3:o:arista:eos:4.23.4m
Arista » Eos » Version: 4.23.5m

cpe:2.3:o:arista:eos:4.23.5m
Arista » Eos » Version: 4.23.6m

cpe:2.3:o:arista:eos:4.23.6m
Arista » Eos » Version: 4.24

cpe:2.3:o:arista:eos:4.24
Arista » Eos » Version: 4.24.0

cpe:2.3:o:arista:eos:4.24.0
Arista » Eos » Version: 4.24.0f

cpe:2.3:o:arista:eos:4.24.0f
Arista » Eos » Version: 4.24.2.1f

cpe:2.3:o:arista:eos:4.24.2.1f
Arista » Eos » Version: 4.24.2.4f

cpe:2.3:o:arista:eos:4.24.2.4f
Arista » Eos » Version: 4.24.2f

cpe:2.3:o:arista:eos:4.24.2f
Arista » Eos » Version: 4.24.3.1m

cpe:2.3:o:arista:eos:4.24.3.1m
Arista » Eos » Version: 4.25

cpe:2.3:o:arista:eos:4.25
Arista » Eos » Version: 4.25.0

cpe:2.3:o:arista:eos:4.25.0
Arista » Eos » Version: 4.25.0f

cpe:2.3:o:arista:eos:4.25.0f
Arista » Eos » Version: 4.25.1f

cpe:2.3:o:arista:eos:4.25.1f
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25686

Products

Pricing

Contact Us