VDB
GCVE-110-MAGEIA-2024-41
GCVE-110-MAGEIA-2024-41
Advisory Published
This updated dnsmasq package fixes security issues:
Certain DNSSEC aspects of the DNS protocol allow a remote attacker to
trigger a denial of service via extreme consumption of resource caused
by DNSSEC query or response:
- KeyTrap - Extreme CPU consumption in DNSSEC validator.
(CVE-2023-50387)
- Preparing an NSEC3 closest encloser proof can exhaust CPU resources.
(CVE-2023-50868)
This update also fixes issues with udp packet size (fix already present
in mageia package for 2.89), possible segfault and caching.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | dnsmasq | 2.90-1.mga9 (unaffected), 2.90-1.mga9 (unaffected), 0 (affected), 0 (affected) | — |
| Mageia | fife | 0 (affected), 0.4.2-20.1.mga9 (unaffected) | — |
| Mageia | unknown-horizons | 0 (affected), 2019.1-9.1.mga9 (unaffected) | — |
References
Browse GCVE Records
73,053 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.