Sophos Firewall

Discussions dnsmasq vulnerabilities (CVE-2017-14491)

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 5 replies
Subscribers 29 subscribers
Views 9385 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

dnsmasq vulnerabilities (CVE-2017-14491)

MichaelGombos over 7 years ago

A vulnerability was recently released that targets dnsmasq. Our auto updating ubuntu servers all patched themselves. Is our XG firewall vulnerable to this exploit? If so, is there an ETA on a firmware update?

Thanks.

This thread was automatically locked due to age.

Parents

0 lferrara over 7 years ago

Thanks Michael for pointing ut out.

Ashen1 can you investigate on it?

Where are sachingurung and Aditya Patel?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 7 years ago

Thanks Michael for pointing ut out.

Ashen1 can you investigate on it?

Where are sachingurung and Aditya Patel?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Billybob over 7 years ago in reply to lferrara

I don't think XG uses dnsmasq package at all and uses bind for dns resolution but a clarity from sophos would be nice.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to Billybob

Here the official KB:

https://community.sophos.com/kb/en-us/127538

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to lferrara

IPS signatures are currently sitting on 14.07 on my v17B XG and updated today 5th Oct.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Ashen1 over 7 years ago in reply to lferrara

Hi Luk,

I've been off work for the past few days, you got the KB right, will still look if I can find anymore information and give you a heads up if there is any.

Thanks,

Raphael
Cancel
Vote Up 0 Vote Down

Cancel