SUSE-SU-2015:0979-1

    Dashboard / Vulnerabilities / SUSE-SU-2015:0979-1

    SUSE-SU-2015:0979-1

    Published: 28 Apr 2015Last Modified: 4 Feb 2026
    Upstream:
    CVE-2015-3294
    Aliases:
    CVE-2015-3294

    Summary: Security update for dnsmasq

    Details: The DNS server dnsmasq was updated to fix one security issue and one non-security bug. The following vulnerability was fixed: * CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service (DoS) or read heap memory, potentially disclosing information such as performed DNS queries or encryption keys. (bsc#928867) The following bug was fixed: * bsc#923144: When answer to an upstream query is a CNAME pointing to an A/AAAA record which is present locally (/etc/hosts), allow caching when the upstream and local A/AAAA records have the same value.

    References: https://www.suse.com/support/update/announcement/2015/suse-su-20150979-1/, https://bugzilla.suse.com/923144, https://bugzilla.suse.com/928867, https://www.suse.com/security/cve/CVE-2015-3294

    Affected packages

    Package

    Name: dnsmasq

    Purl: pkg:rpm/suse/dnsmasq&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.71-4.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2015:0979-1 | CVE-DB