CVE-2021-3448

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Weakness enumeration

CWE-358

Affected software

No affected versions have been published.

Timeline

Published
Apr 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-344806.8Scripting Engine Memory Corruption VulnerabilityCVE-2021-344818.8A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacCVE-2021-344837.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-344847.8Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2021-344855.0.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2021-344867.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-344877.0Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-344887.8Windows Console Driver Elevation of Privilege VulnerabilityCVE-2021-344897.8DirectWrite Remote Code Execution VulnerabilityCVE-2021-34495.9An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClCVE-2021-344907.5Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-344915.5Win32k Information Disclosure Vulnerability
CVE-2021-3448: Medium severity, CVSS 4.0 | Vulnix