CVE:CVE-2020-25685
CNNVD:CNNVD-202101-1574
dnsmasq是一款使用C语言编写的轻量级DNS转发和DHCP、TFTP服务器。
dnsmasq 存在加密问题漏洞，该漏洞源于在没有dnnssec的情况下编译时使用弱哈希算法(CRC32)来验证DNS响应。
solution:Upgrade thekelleys dnsmasq to a higher version than 2.83,and avoid the version (,2.83); Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade arista eos to a higher version than 4.21.14m,4.22.9m,4.23.7m,4.24.5m,4.25.2f,and avoid the version [4.21,4.21.14m),[4.22,4.22.9m),[4.23,4.23.7m),[4.24,4.24.5m),[4.25,4.25.2f)