Dnsmasq Vulnerabilities Threaten DNS Integrity

[PHolder]

I came across a beta update for my router and it mentioned a hotfix for dnmasq related issues, so I did a quick Google and this turned up.

Dnsmasq Vulnerabilities Threaten DNS Integrity | Cyware Hacker News

Israeli researchers shared details on seven extremely critical DNS-related vulnerabilities, tracked as DNSpooq, exposing millions of devices to a variety of DNS cache poisoning attacks. Learn more!

cyware.com

@Steve, could be a topic for the podcast.

 

[pmikep]

I have removed my content

 

[MichaelRSorg]

This is a great test of your router vendor. This bug flies under the radar. Does your router vendor fix it? Do they say anything at all about it? My preferred router vendor (Peplink) was asked about it and found the vulnerable software in only one of their models and only in one specific use case. If you have a consumer router from Netgear, Linksys, Asus, TP-Link, D-Link, etc. try to see if they acknowledge this in any way.

 

[pioruns]

I saw that update for my EdgeMax's. But I use BIND and so disabled DNS caching in my router. (I can't find (using a quick DDG search) whether BIND is susceptible to DNSpooq or not. Nor is there anything about pooq that I can find in the BIND 9.17.9 Release Notes.)

I also use BIND in my local network and I didn't realized that Edgerouter X is running another DNS service (dnsmasq) with it's own cache. Now I've disabled it. Thanks.

 

[pmikep]

I have removed my content