CVE catalog

CVE-2023-28450

dnsmasq: CVE-2023-28450

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.84% · Oct 25, 2026

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandnsmasqsid2.93-3fixed
Debiandnsmasqforky2.93-3fixed
Debiandnsmasqtrixie2.91-1+deb13u2fixed
Debiandnsmasqtrixie-security2.91-1+deb13u1fixed
Debiandnsmasqbookworm2.90-4~deb12u2fixed
Debiandnsmasqbookworm-security2.90-4~deb12u2fixed
Alpinednsmasq3.142.86-r3fixed
Alpinednsmasq3.152.86-r2fixed
Alpinednsmasq3.162.86-r4fixed
Alpinednsmasq3.172.87-r2fixed
Alpinednsmasq3.182.89-r3fixed
Alpinednsmasq3.192.89-r3fixed
Alpinednsmasq3.202.89-r3fixed
Alpinednsmasq3.212.89-r3fixed
Alpinednsmasq3.222.89-r3fixed
Alpinednsmasq3.232.89-r3fixed
Alpinednsmasq3.242.89-r3fixed
Ubuntudnsmasqpro2.75-1vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.1vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.2vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.3vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.4vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.5vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.7vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.8vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.10vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.10+esm1vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.16.04.1+esm1vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.16.04.1+esm2fixed
Ubuntudnsmasq18.042.78-1vulnerable
Ubuntudnsmasq18.042.78-3vulnerable
Ubuntudnsmasq18.042.79-1vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.2vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.3vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.4vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.5vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.6vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.7fixed
Ubuntudnsmasq20.042.80-1ubuntu2vulnerable
Ubuntudnsmasq20.042.80-1ubuntu4vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.2vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.3vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.4vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.5vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.6vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.7fixed
Ubuntudnsmasq22.042.85-1ubuntu2vulnerable
Ubuntudnsmasq22.042.86-1.1vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.1vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.2vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.3fixed
Ubuntudnsmasqpro2.78-1vulnerable
Ubuntudnsmasqpro2.78-3vulnerable
Ubuntudnsmasqpro2.79-1vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.2vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.3vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.4vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.5vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.6vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.7vulnerable
Ubuntudnsmasqpro2.90-0ubuntu0.18.04.1+esm1fixed
Ubuntudnsmasq20.042.80-1ubuntu2vulnerable
Ubuntudnsmasq20.042.80-1ubuntu4vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.2vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.3vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.4vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.5vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.6vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.7vulnerable
Ubuntudnsmasq20.042.90-0ubuntu0.20.04.1fixed
Ubuntudnsmasq22.042.85-1ubuntu2vulnerable
Ubuntudnsmasq22.042.86-1.1vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.1vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.2vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.3vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.4vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.5vulnerable
Ubuntudnsmasq22.042.90-0ubuntu0.22.04.1fixed
Susednsmasqlinux micro 6.02.90-1.1fixed
Susednsmasqlinux enterprise micro 5.32.90-150400.16.3.1fixed
Susednsmasqlinux enterprise micro 5.42.90-150400.16.3.1fixed
Susednsmasqlinux enterprise micro 5.52.90-150400.16.3.1fixed
Susednsmasqlinux enterprise module for basesystem 15 sp62.90-150400.16.3.1fixed
Susednsmasqlinux enterprise high performance computing 15 sp4-espos2.90-150400.16.3.1fixed
Susednsmasqlinux enterprise high performance computing 15 sp4-ltss2.90-150400.16.3.1fixed
Susednsmasqlinux enterprise high performance computing 15 sp5-espos2.90-150400.16.3.1fixed
Susednsmasqlinux enterprise high performance computing 15 sp5-ltss2.90-150400.16.3.1fixed
Susednsmasqlinux enterprise server 15 sp4-ltss2.90-150400.16.3.1fixed
Susednsmasqlinux enterprise server 15 sp5-ltss2.90-150400.16.3.1fixed
Susednsmasqlinux enterprise server for sap applications 15 sp42.90-150400.16.3.1fixed
Susednsmasqlinux enterprise server for sap applications 15 sp52.90-150400.16.3.1fixed
Susednsmasqmanager proxy 4.32.90-150400.16.3.1fixed
Susednsmasqmanager server 4.32.90-150400.16.3.1fixed
Opensusednsmasqleap micro 5.52.90-150400.16.3.1fixed
Opensusednsmasqleap 15.62.90-150400.16.3.1fixed
Susednsmasqlinux enterprise real time 15 sp32.86-150100.7.23.1fixed
Susednsmasqlinux enterprise micro 5.12.86-150100.7.23.1fixed
Susednsmasqlinux enterprise micro 5.22.86-150100.7.23.1fixed
Opensusednsmasqtumbleweed2.89-3.1fixed
Susednsmasqhpe helion openstack 82.78-18.21.1fixed
Susednsmasqopenstack cloud 82.78-18.21.1fixed
Susednsmasqopenstack cloud 92.78-18.21.1fixed
Susednsmasqopenstack cloud crowbar 82.78-18.21.1fixed
Susednsmasqopenstack cloud crowbar 92.78-18.21.1fixed
Susednsmasqlinux enterprise server 12 sp52.78-18.21.1fixed
Susednsmasqlinux enterprise server for sap applications 12 sp52.78-18.21.1fixed
Ubuntudnsmasqpro2.75-1vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.1vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.2vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.3vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.4vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.5vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.7vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.8vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.10vulnerable
Ubuntudnsmasqpro2.75-1ubuntu0.16.04.10+esm1vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.16.04.1+esm1vulnerable
Ubuntudnsmasqpro2.79-1ubuntu0.16.04.1+esm2fixed
Ubuntudnsmasq18.042.78-1vulnerable
Ubuntudnsmasq18.042.78-3vulnerable
Ubuntudnsmasq18.042.79-1vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.2vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.3vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.4vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.5vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.6vulnerable
Ubuntudnsmasq18.042.79-1ubuntu0.7fixed
Ubuntudnsmasq20.042.80-1ubuntu2vulnerable
Ubuntudnsmasq20.042.80-1ubuntu4vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.2vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.3vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.4vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.5vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.6vulnerable
Ubuntudnsmasq20.042.80-1.1ubuntu1.7fixed
Ubuntudnsmasq22.042.85-1ubuntu2vulnerable
Ubuntudnsmasq22.042.86-1.1vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.1vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.2vulnerable
Ubuntudnsmasq22.042.86-1.1ubuntu0.3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandnsmasqsourcesid2.90-1not yet assignedNot reported[1033165]
Debiandnsmasqsourceforky2.90-1not yet assignedNot reported[1033165]
Debiandnsmasqsourcetrixie2.90-1not yet assignedNot reported[1033165]
Debiandnsmasqsourcebookworm2.90-4~deb12u1not yet assignedNot reported[1033165]
Alpinednsmasqapk3.142.86-r3Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.152.86-r2Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.162.86-r4Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.172.87-r2Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.182.89-r3Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.192.89-r3Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.202.89-r3Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.212.89-r3Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.222.89-r3Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.232.89-r3Not reportedALPINE-CVE-2023-28450Not reported
Alpinednsmasqapk3.242.89-r3Not reportedALPINE-CVE-2023-28450Not reported
Ubuntudnsmasqdebpro2.79-1ubuntu0.16.04.1+esm2Not reportedUSN-6034-1Not reported
Ubuntudnsmasqdeb18.042.79-1ubuntu0.7Not reportedUSN-6034-1Not reported
Ubuntudnsmasqdeb20.042.80-1.1ubuntu1.7Not reportedUSN-6034-1Not reported
Ubuntudnsmasqdeb22.042.86-1.1ubuntu0.3Not reportedUSN-6034-1Not reported
Ubuntudnsmasqdebpro2.90-0ubuntu0.18.04.1+esm1Not reportedUSN-6657-2Not reported
Ubuntudnsmasqdeb20.042.90-0ubuntu0.20.04.1Not reportedUSN-6657-1Not reported
Ubuntudnsmasqdeb22.042.90-0ubuntu0.22.04.1Not reportedUSN-6657-1Not reported
Susednsmasqrpmlinux micro 6.02.90-1.1Not reportedSUSE-SU-2025:20118-1Not reported
Susednsmasqrpmlinux enterprise micro 5.32.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise micro 5.42.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise micro 5.52.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise module for basesystem 15 sp62.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise high performance computing 15 sp4-espos2.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise high performance computing 15 sp4-ltss2.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise high performance computing 15 sp5-espos2.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise high performance computing 15 sp5-ltss2.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise server 15 sp4-ltss2.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise server 15 sp5-ltss2.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise server for sap applications 15 sp42.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise server for sap applications 15 sp52.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmmanager proxy 4.32.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmmanager server 4.32.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Opensusednsmasqrpmleap micro 5.52.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Opensusednsmasqrpmleap 15.62.90-150400.16.3.1Not reportedSUSE-SU-2025:0071-1Not reported
Susednsmasqrpmlinux enterprise real time 15 sp32.86-150100.7.23.1Not reportedSUSE-SU-2023:1930-1Not reported
Susednsmasqrpmlinux enterprise micro 5.12.86-150100.7.23.1Not reportedSUSE-SU-2023:1930-1Not reported
Susednsmasqrpmlinux enterprise micro 5.22.86-150100.7.23.1Not reportedSUSE-SU-2023:1930-1Not reported
Opensusednsmasqrpmtumbleweed2.89-3.1Not reportedOPENSUSE-SU-2024:12887-1Not reported
Susednsmasqrpmhpe helion openstack 82.78-18.21.1Not reportedSUSE-SU-2023:2123-1Not reported
Susednsmasqrpmopenstack cloud 82.78-18.21.1Not reportedSUSE-SU-2023:2123-1Not reported
Susednsmasqrpmopenstack cloud 92.78-18.21.1Not reportedSUSE-SU-2023:2123-1Not reported
Susednsmasqrpmopenstack cloud crowbar 82.78-18.21.1Not reportedSUSE-SU-2023:2123-1Not reported
Susednsmasqrpmopenstack cloud crowbar 92.78-18.21.1Not reportedSUSE-SU-2023:2123-1Not reported
Susednsmasqrpmlinux enterprise server 12 sp52.78-18.21.1Not reportedSUSE-SU-2023:2123-1Not reported
Susednsmasqrpmlinux enterprise server for sap applications 12 sp52.78-18.21.1Not reportedSUSE-SU-2023:2123-1Not reported
Ubuntudnsmasqdebpro2.79-1ubuntu0.16.04.1+esm2Not reportedUBUNTU-CVE-2023-28450Not reported
Ubuntudnsmasqdeb18.042.79-1ubuntu0.7Not reportedUBUNTU-CVE-2023-28450Not reported
Ubuntudnsmasqdeb20.042.80-1.1ubuntu1.7Not reportedUBUNTU-CVE-2023-28450Not reported
Ubuntudnsmasqdeb22.042.86-1.1ubuntu0.3Not reportedUBUNTU-CVE-2023-28450Not reported

[Debian bug #1033165]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References