ALPINE-CVE-2021-3448 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2021-3448 PUBLISHED CVSS 4 MEDIUM

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

Risk Scores

CVSS v3.1

4

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Affected Products

Vendor	Product	Versions
Alpine:v3.17	dnsmasq	0, 0, 0
Alpine:v3.19	dnsmasq	0, 0, 0
Alpine:v3.18	dnsmasq	0, 0, 0
Alpine:v3.13	dnsmasq	2.59-r1, 2.59-r0, 2.58-r0
Alpine:v3.16	dnsmasq	0, 0, 0
Alpine:v3.15	dnsmasq	0, 0, 0
Alpine:v3.22	dnsmasq	0, 0, 0
Alpine:v3.21	dnsmasq	0, 0, 0
Alpine:v3.14	dnsmasq	2.52-r0, 2.84-r0, 2.83-r0
Alpine:v3.10	dnsmasq	0, 2.46-r0, 2.47-r0
Alpine:v3.12	dnsmasq	2.81-r0, 2.80-r5, 2.80-r4
Alpine:v3.11	dnsmasq	2.76-r3, 2.83-r0, 2.80-r5
Alpine:v3.23	dnsmasq	0, 0, 0
Alpine:v3.20	dnsmasq	0, 0, 0

Timeline

Apr 8, 2021 CVE Published
Dec 3, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2021-3448 advisory

Open in Interactive Console →