CVE-2021-3448
4.0 MEDIUMA flaw was found in dnsmasq in versions before 2.85
Published: 2021-04-08 · Last updated: 2026-06-17
Severity and scoring
- CVSS
- 4.0 MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
- CWE
- CWE-358
Affected products
| Vendor | Product |
|---|---|
| fedoraproject | communications_cloud_native_core_network_function_cloud_native_environment, dnsmasq, enterprise_linux |
| oracle | communications_cloud_native_core_network_function_cloud_native_environment, dnsmasq, enterprise_linux |
| redhat | communications_cloud_native_core_network_function_cloud_native_environment, dnsmasq, enterprise_linux |
| thekelleys | communications_cloud_native_core_network_function_cloud_native_environment, dnsmasq, enterprise_linux |
Description
A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.
Source: NVD
References
- [NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-3448
- [Patch]https://bugzilla.redhat.com/show_bug.cgi?id=1939368
- [Other]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24/
- [Other]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7/
- [Other]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/
- [Other]https://security.gentoo.org/glsa/202105-20
- [Patch]https://www.oracle.com/security-alerts/cpujan2022.html
- [Patch]https://bugzilla.redhat.com/show_bug.cgi?id=1939368
- [Other]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24/
- [Other]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7/
- [Other]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/
- [Other]https://security.gentoo.org/glsa/202105-20
- [Patch]https://www.oracle.com/security-alerts/cpujan2022.html
Related CVEs
Same vendor
- CVE-2026-1767 — A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component (5.6 MEDIUM)
- CVE-2026-1766 — A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 com... (5.6 MEDIUM)
- CVE-2026-35273 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management) (9.8 CRITICAL)
- CVE-2026-11793 — A stack buffer overflow flaw was found in 389 Directory Server (4.9 MEDIUM)
- CVE-2026-11790 — A flaw was found in 389 Directory Server (4.9 MEDIUM)
Same CWE
- CVE-2026-11127 — Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain sp... (6.5 MEDIUM)
- CVE-2026-11122 — Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or... (6.1 MEDIUM)
- CVE-2026-44475 — Ella Core is a 5G core designed for private networks (6.1 MEDIUM)
- CVE-2026-44474 — Ella Core is a 5G core designed for private networks (3.7 LOW)
- CVE-2026-44473 — Ella Core is a 5G core designed for private networks (7.1 HIGH)