A group of vulnerabilities in the popular DNSMasq software used for domain name system (DNS) caching and IP address assignment could allow an attacker to reroute network traffic or use nearly 1 million open forwarders on the Internet for denial-of-service (DoS) attacks. The vulnerabilities — found by Israeli security services firm JSOF and confirmed by large technology firms including Google and Red Hat — include three vulnerabilities that allow DNS cache poisoning and four buffer-overflow vulnerabilities.

Read full article on Dark Reading