{
  "cveId": "CVE-2020-25682",
  "url": "https://patchblox.com/security/cve/CVE-2020-25682",
  "summary": "CVE-2020-25682 is fixed in 4 products on 1 platform, first by dnsmasq 2.79-1ubuntu0.2, released January 18, 2021. It is not reported as exploited. Patch Radar priority: High.",
  "title": "dnsmasq: A flaw was found in dnsmasq before 2.83",
  "description": "A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerabilitywas discovered in the way dnsmasq extract names from DNS packets beforevalidating them with DNSSEC data. An attacker on the network, who cancreate valid DNS replies, could use this flaw to cause an overflow witharbitrary data in a heap-allocated memory, possibly executing code on themachine. The flaw is in the rfc1035.c:extract_name() function, which writesdata to the memory pointed by name assuming MAXDNAME*2 bytes are availablein the buffer. However, in some code execution paths, it is possibleextract_name() gets passed an offset from the base buffer, thus reducing,in practice, the number of available bytes that can be written in thebuffer. The highest threat from this vulnerability is to dataconfidentiality and integrity as well as system availability.",
  "published": "2021-01-18T16:00:00Z",
  "severity": "Medium",
  "cvss": 8.1,
  "epss": 0.75066,
  "epssPercentile": 0.99513,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "dnsmasq",
      "release": "RHEL 8",
      "fixedVersion": "0:2.79-13.el8_3.1",
      "fix": "RHSA-2021:0150",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-0150",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.79-1ubuntu0.2",
      "fix": "dnsmasq 2.79-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-dnsmasq-2.79-1ubuntu0.2",
      "released": "2021-01-18T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.80-1.1ubuntu1.2",
      "fix": "dnsmasq 2.80-1.1ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-dnsmasq-2.80-1.1ubuntu1.2",
      "released": "2021-01-18T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.82-1ubuntu2",
      "fix": "dnsmasq 2.82-1ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-dnsmasq-2.82-1ubuntu2",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.82-1ubuntu2",
      "fix": "dnsmasq 2.82-1ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-dnsmasq-2.82-1ubuntu2",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq",
      "release": "ol 8",
      "fixedVersion": "0:2.79-13.el8_3.1",
      "fix": "ELSA-2021-0150",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-0150",
      "released": "2021-01-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-base",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.79-1ubuntu0.2",
      "fix": "dnsmasq-base 2.79-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-dnsmasq-base-2.79-1ubuntu0.2",
      "released": "2021-01-18T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-base",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.80-1.1ubuntu1.2",
      "fix": "dnsmasq-base 2.80-1.1ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-dnsmasq-base-2.80-1.1ubuntu1.2",
      "released": "2021-01-18T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-base",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.82-1ubuntu2",
      "fix": "dnsmasq-base 2.82-1ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-dnsmasq-base-2.82-1ubuntu2",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-base",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.82-1ubuntu2",
      "fix": "dnsmasq-base 2.82-1ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-dnsmasq-base-2.82-1ubuntu2",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-base-lua",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.79-1ubuntu0.2",
      "fix": "dnsmasq-base-lua 2.79-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-dnsmasq-base-lua-2.79-1ubuntu0.2",
      "released": "2021-01-18T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-base-lua",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.80-1.1ubuntu1.2",
      "fix": "dnsmasq-base-lua 2.80-1.1ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-dnsmasq-base-lua-2.80-1.1ubuntu1.2",
      "released": "2021-01-18T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-base-lua",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.82-1ubuntu2",
      "fix": "dnsmasq-base-lua 2.82-1ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-dnsmasq-base-lua-2.82-1ubuntu2",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-base-lua",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.82-1ubuntu2",
      "fix": "dnsmasq-base-lua 2.82-1ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-dnsmasq-base-lua-2.82-1ubuntu2",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-utils",
      "release": "RHEL 8",
      "fixedVersion": "0:2.79-13.el8_3.1",
      "fix": "RHSA-2021:0150",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-0150",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-utils",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.79-1ubuntu0.2",
      "fix": "dnsmasq-utils 2.79-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-dnsmasq-utils-2.79-1ubuntu0.2",
      "released": "2021-01-18T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-utils",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.80-1.1ubuntu1.2",
      "fix": "dnsmasq-utils 2.80-1.1ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-dnsmasq-utils-2.80-1.1ubuntu1.2",
      "released": "2021-01-18T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-utils",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.82-1ubuntu2",
      "fix": "dnsmasq-utils 2.82-1ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-dnsmasq-utils-2.82-1ubuntu2",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-utils",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.82-1ubuntu2",
      "fix": "dnsmasq-utils 2.82-1ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-dnsmasq-utils-2.82-1ubuntu2",
      "released": "2021-01-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dnsmasq-utils",
      "release": "ol 8",
      "fixedVersion": "0:2.79-13.el8_3.1",
      "fix": "ELSA-2021-0150",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-0150",
      "released": "2021-01-20T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}