{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"Medium"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"dnsmasq security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for dnsmasq is now available for openEuler-20.03-LTS-SP1.",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":"Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks.\n\nSecurity Fix(es):\n\nA flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.(CVE-2021-3448)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for dnsmasq is now available for openEuler-20.03-LTS-SP1.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"Medium",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"dnsmasq",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2021-1189",
				"category":"self",
				"url":"https://openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1189"
			},
			{
				"summary":"CVE-2021-3448",
				"category":"self",
				"url":"https://openeuler.org/en/security/cve/detail?cveId=CVE-2021-3448&packageName=dnsmasq"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3448"
			},
			{
				"summary":"openEuler-SA-2021-1189 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2021/csaf-openeuler-sa-2021-1189.json"
			}
		],
		"title":"An update for dnsmasq is now available for openEuler-20.03-LTS-SP1",
		"tracking":{
			"initial_release_date":"2021-05-15T09:20:02+08:00",
			"revision_history":[
				{
					"date":"2021-05-15T09:20:02+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				},
				{
					"date":"2024-10-31T09:20:02+08:00",
					"summary":"final",
					"number":"2.0.0"
				}
			],
			"generator":{
				"date":"2024-10-31T09:20:02+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2024-10-31T09:20:02+08:00",
			"id":"openEuler-SA-2021-1189",
			"version":"2.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"openEuler-20.03-LTS-SP1",
									"name":"openEuler-20.03-LTS-SP1"
								},
								"name":"openEuler-20.03-LTS-SP1",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-debugsource-2.82-8.oe1.aarch64.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-debugsource-2.82-8.oe1.aarch64.rpm"
								},
								"name":"dnsmasq-debugsource-2.82-8.oe1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-help-2.82-8.oe1.aarch64.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-help-2.82-8.oe1.aarch64.rpm"
								},
								"name":"dnsmasq-help-2.82-8.oe1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-2.82-8.oe1.aarch64.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-2.82-8.oe1.aarch64.rpm"
								},
								"name":"dnsmasq-2.82-8.oe1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-debuginfo-2.82-8.oe1.aarch64.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-debuginfo-2.82-8.oe1.aarch64.rpm"
								},
								"name":"dnsmasq-debuginfo-2.82-8.oe1.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-2.82-8.oe1.src.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-2.82-8.oe1.src.rpm"
								},
								"name":"dnsmasq-2.82-8.oe1.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-2.82-8.oe1.x86_64.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-2.82-8.oe1.x86_64.rpm"
								},
								"name":"dnsmasq-2.82-8.oe1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-debugsource-2.82-8.oe1.x86_64.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-debugsource-2.82-8.oe1.x86_64.rpm"
								},
								"name":"dnsmasq-debugsource-2.82-8.oe1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-help-2.82-8.oe1.x86_64.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-help-2.82-8.oe1.x86_64.rpm"
								},
								"name":"dnsmasq-help-2.82-8.oe1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP1"
									},
									"product_id":"dnsmasq-debuginfo-2.82-8.oe1.x86_64.rpm(20.03-LTS-SP1)",
									"name":"dnsmasq-debuginfo-2.82-8.oe1.x86_64.rpm"
								},
								"name":"dnsmasq-debuginfo-2.82-8.oe1.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-debugsource-2.82-8.oe1.aarch64.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-debugsource-2.82-8.oe1.aarch64",
					"name":"dnsmasq-debugsource-2.82-8.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-help-2.82-8.oe1.aarch64.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-help-2.82-8.oe1.aarch64",
					"name":"dnsmasq-help-2.82-8.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-2.82-8.oe1.aarch64.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.aarch64",
					"name":"dnsmasq-2.82-8.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-debuginfo-2.82-8.oe1.aarch64.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-debuginfo-2.82-8.oe1.aarch64",
					"name":"dnsmasq-debuginfo-2.82-8.oe1.aarch64 as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-2.82-8.oe1.src.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.src",
					"name":"dnsmasq-2.82-8.oe1.src as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-2.82-8.oe1.x86_64.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.x86_64",
					"name":"dnsmasq-2.82-8.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-debugsource-2.82-8.oe1.x86_64.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-debugsource-2.82-8.oe1.x86_64",
					"name":"dnsmasq-debugsource-2.82-8.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-help-2.82-8.oe1.x86_64.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-help-2.82-8.oe1.x86_64",
					"name":"dnsmasq-help-2.82-8.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-20.03-LTS-SP1",
				"product_reference":"dnsmasq-debuginfo-2.82-8.oe1.x86_64.rpm(20.03-LTS-SP1)",
				"full_product_name":{
					"product_id":"openEuler-20.03-LTS-SP1:dnsmasq-debuginfo-2.82-8.oe1.x86_64",
					"name":"dnsmasq-debuginfo-2.82-8.oe1.x86_64 as a component of openEuler-20.03-LTS-SP1"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2021-3448",
			"notes":[
				{
					"text":"A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-20.03-LTS-SP1:dnsmasq-debugsource-2.82-8.oe1.aarch64",
					"openEuler-20.03-LTS-SP1:dnsmasq-help-2.82-8.oe1.aarch64",
					"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.aarch64",
					"openEuler-20.03-LTS-SP1:dnsmasq-debuginfo-2.82-8.oe1.aarch64",
					"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.src",
					"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.x86_64",
					"openEuler-20.03-LTS-SP1:dnsmasq-debugsource-2.82-8.oe1.x86_64",
					"openEuler-20.03-LTS-SP1:dnsmasq-help-2.82-8.oe1.x86_64",
					"openEuler-20.03-LTS-SP1:dnsmasq-debuginfo-2.82-8.oe1.x86_64"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-20.03-LTS-SP1:dnsmasq-debugsource-2.82-8.oe1.aarch64",
						"openEuler-20.03-LTS-SP1:dnsmasq-help-2.82-8.oe1.aarch64",
						"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.aarch64",
						"openEuler-20.03-LTS-SP1:dnsmasq-debuginfo-2.82-8.oe1.aarch64",
						"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.src",
						"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.x86_64",
						"openEuler-20.03-LTS-SP1:dnsmasq-debugsource-2.82-8.oe1.x86_64",
						"openEuler-20.03-LTS-SP1:dnsmasq-help-2.82-8.oe1.x86_64",
						"openEuler-20.03-LTS-SP1:dnsmasq-debuginfo-2.82-8.oe1.x86_64"
					],
					"details":"dnsmasq security update",
					"category":"vendor_fix",
					"url":"https://openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1189"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"MEDIUM",
						"baseScore":4.0,
						"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
						"version":"3.1"
					},
					"products":[
						"openEuler-20.03-LTS-SP1:dnsmasq-debugsource-2.82-8.oe1.aarch64",
						"openEuler-20.03-LTS-SP1:dnsmasq-help-2.82-8.oe1.aarch64",
						"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.aarch64",
						"openEuler-20.03-LTS-SP1:dnsmasq-debuginfo-2.82-8.oe1.aarch64",
						"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.src",
						"openEuler-20.03-LTS-SP1:dnsmasq-2.82-8.oe1.x86_64",
						"openEuler-20.03-LTS-SP1:dnsmasq-debugsource-2.82-8.oe1.x86_64",
						"openEuler-20.03-LTS-SP1:dnsmasq-help-2.82-8.oe1.x86_64",
						"openEuler-20.03-LTS-SP1:dnsmasq-debuginfo-2.82-8.oe1.x86_64"
					]
				}
			],
			"threats":[
				{
					"details":"Medium",
					"category":"impact"
				}
			],
			"title":"CVE-2021-3448"
		}
	]
}