CVE-2020-25681

Name	CVE-2020-25681
Description	A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-2604-1, DSA-4844-1, ELA-389-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
dnsmasq (PTS)	jessie, jessie (lts)	2.72-3+deb8u7	fixed
	stretch (security)	2.76-5+deb9u3	fixed
	stretch (lts), stretch	2.76-5+deb9u4	fixed
	buster, buster (lts)	2.80-1+deb10u3	fixed
	buster (security)	2.80-1+deb10u1	fixed
	bullseye	2.85-1	fixed
	bullseye (security)	2.85-1+deb11u1	fixed
	bookworm	2.89-1	fixed
	sid, trixie	2.90-7	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
dnsmasq	source	jessie	2.72-3+deb8u6	ELA-389-1
dnsmasq	source	stretch	2.76-5+deb9u3	DLA-2604-1
dnsmasq	source	buster	2.80-1+deb10u1	DSA-4844-1
dnsmasq	source	(unstable)	2.83-1

Notes

https://www.openwall.com/lists/oss-security/2021/01/19/1
https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=4e96a4be685c9e4445f6ee79ad0b36b9119b502a