DNSpook flaws in dnsmasq

Here we go again. Yet another group of flaws has been discovered in dnsmasq as detailed here

Are Peplink devices affected?

1 Like

It lists “Peplink” and “suf series routers”
(if that’s true then I would not assume limited to Surf Soho routers)

Peplink, Is there an official comment on this?

The reference on the website you shared provides a link back to peplink where they address this:

Cheers,

Z

1 Like

Appreciate it. Thanks!

The Forum post that was linked to is from October 2017 and references a completely different set of bugs in the dnsmasq software. Still waiting to hear back from Peplink on the just-recently disclosed set of bugs.

Indeed it is from 2017 - it was the link posted on the website Datahead published (and the only entry for Peplink on that website).

Cheers,

Z

We confirmed this only applies to the MFA when running KVM with a virtual private network. If your MFA is running KVM, you may upgrade to the firmware below.

https://download.peplink.com/firmware/plb2500/fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-8.1.1s044-build5014.bin

Thank you.

1 Like