Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Dnsmasq, a lightweight DNS and DHCP server commonly used on routers and small networks, is affected. When DHCP leasequery is enabled without restricting which source addresses may query it, any host on the local network can retrieve lease records, exposing assigned IP addresses, MAC addresses, and hostnames.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The feature is off unless an administrator turns it on.
Timeline
- CVE published
- First seen by cve.now
- Record last updated
Affected versions
- rhceph/alloy-rhel10
Version range not reported
- dnsmasq
Version range not reported
- dnsmasq
Version range not reported
- dnsmasq
Version range not reported
- dnsmasq
Version range not reported
- dnsmasq
Version range not reported
- openshift4/ose-baremetal-runtimecfg-rhel8
Version range not reported
- openshift4/ose-baremetal-runtimecfg-rhel9
Version range not reported
- openshift/ose-rhel-coreos-8
Version range not reported
- openshift/ose-rhel-coreos-9
Version range not reported
- openshift5/ose-baremetal-runtimecfg-rhel9
Version range not reported
- openshift/ose-rhel-coreos-9
Version range not reported
- dnsmasq
Version range not reported
- rhoso-operators/infra-rhel9-operator
Version range not reported