*** This bug is a security vulnerability *** Private security bug reported:
Haw Loeung reports the follow issue in dnsmasq ubuntu@instance-lcy01:~$ host www.googleapis.com ;; Warning: Message parser reports malformed message packet. ;; Warning: Message parser reports malformed message packet. www.googleapis.com is an alias for googleapis.l.google.com. ubuntu@instance-lcy01:$ grep nameserver /etc/resolv.conf nameserver 10.55.60.1 ubuntu@instance-lcy02:~$ host www.googleapis.com ;; Warning: Message parser reports malformed message packet. ;; Warning: Message parser reports malformed message packet. www.googleapis.com is an alias for googleapis.l.google.com. ubuntu@instance-lcy02:~$ grep nameserver /etc/resolv.conf nameserver 10.55.32.1 [hloeung@silver ~]$ host www.googleapis.com 10.55.32.1 | grep Warning ;; Warning: Message parser reports malformed message packet. ;; Warning: Message parser reports malformed message packet. [hloeung@silver ~]$ host www.googleapis.com 10.55.59.1 | grep Warning [hloeung@silver ~]$ host www.googleapis.com 10.55.59.1 | grep Warning [hloeung@silver ~]$ host www.googleapis.com 10.55.59.1 | grep Warning [hloeung@silver ~]$ host www.googleapis.com 10.55.59.1 | grep Warning [hloeung@dziban ~]$ host www.googleapis.com 10.55.60.1 | grep Warning ;; Warning: Message parser reports malformed message packet. ;; Warning: Message parser reports malformed message packet. [hloeung@dziban ~]$ host www.googleapis.com 10.55.59.1 | grep Warning [hloeung@dziban ~]$ host www.googleapis.com 10.55.59.1 | grep Warning [hloeung@dziban ~]$ host www.googleapis.com 10.55.59.1 | grep Warning [hloeung@dziban ~]$ apt-cache policy dnsmasq-base dnsmasq-base: Installed: 2.59-4ubuntu0.3 [hloeung@silver ~]$ apt-cache policy dnsmasq-base dnsmasq-base: Installed: 2.59-4ubuntu0.3 Candidate: 2.59-4ubuntu0.3 Version table: *** 2.59-4ubuntu0.3 0 500 https://esm.ubuntu.com/ubuntu/ precise/main amd64 Packages [hloeung@silver ~]$ dig +tcp a www.googleapis.com @10.55.32.1 ;; Warning: Message parser reports malformed message packet. ... ;; WARNING: Messages has 109 extra bytes at end ... ;; MSG SIZE rcvd: 157 [hloeung@silver ~]$ sudo strace -f -p 2418 -s 10240000 2>&1 | grep googleapis -B3 -A3 [pid 11479] getpeername(10, {sa_family=AF_INET, sin_port=htons(33976), sin_addr=inet_addr("10.55.32.1")}, [16]) = 0 [pid 11479] read(10, "\0", 1) = 1 [pid 11479] read(10, "$", 1) = 1 [pid 11479] read(10, "\334r\1\0\0\1\0\0\0\0\0\0\3www\ngoogleapis\3com\0\0\1\0\1", 36) = 36 [pid 11479] write(10, "\0", 1) = 1 [pid 11479] write(10, "\235", 1) = 1 [pid 11479] write(10, "\334r\201\200\0\1\0\6\0\0\0\0\3www\ngoogleapis\3com\0\0\1\0\1\300\f\0\5\0\1\0\0\10\2\0\35\ngoogleapis.\1l.\6google.\3com\0\0\3000\0\1\0\1\0\0\0%\0\4\330:\301J\3000\0\1\0\1\0\0\0%\0\4\254\331\3\312\3000\0\1\0\1\0\0\0%\0\4\254\331\3\252\3000\0\1\0\1\0\0\0%\0\4\330:\330\252\3000\0\1\0\1\0\0\0%\0\4\330:\330\212", 157) = 157 [pid 11479] read(10, "", 1) = 0 [pid 11479] shutdown(10, 2 /* send and receive */) = 0 [pid 11479] close(10) = 0 -- [pid 11491] getpeername(10, {sa_family=AF_INET, sin_port=htons(54452), sin_addr=inet_addr("10.55.32.1")}, [16]) = 0 [pid 11491] read(10, "\0", 1) = 1 [pid 11491] read(10, "$", 1) = 1 [pid 11491] read(10, "\352t\1\0\0\1\0\0\0\0\0\0\3www\ngoogleapis\3com\0\0\1\0\1", 36) = 36 [pid 11491] write(10, "\0", 1) = 1 [pid 11491] write(10, "\235", 1) = 1 [pid 11491] write(10, "\352t\201\200\0\1\0\6\0\0\0\0\3www\ngoogleapis\3com\0\0\1\0\1\300\f\0\5\0\1\0\0\10\1\0\35\ngoogleapis.\1l.\6google.\3com\0\0\3000\0\1\0\1\0\0\0$\0\4\330:\301J\3000\0\1\0\1\0\0\0$\0\4\254\331\3\312\3000\0\1\0\1\0\0\0$\0\4\254\331\3\252\3000\0\1\0\1\0\0\0$\0\4\330:\330\252\3000\0\1\0\1\0\0\0$\0\4\330:\330\212", 157) = 157 [pid 11491] read(10, "", 1) = 0 [pid 11491] shutdown(10, 2 /* send and receive */) = 0 [pid 11491] close(10) = 0 ^C 157 bytes (= 157 from strace) Junien has also seen this with a tcpdump: https://pastebin.canonical.com/204043/ For now, I've downgraded to dnsmasq-base to 2.59-4ubuntu0.2: [hloeung@silver ~]$ apt-cache policy dnsmasq-base dnsmasq-base: Installed: 2.59-4ubuntu0.2 Candidate: 2.59-4ubuntu0.3 Version table: 2.59-4ubuntu0.3 0 500 https://esm.ubuntu.com/ubuntu/ precise/main amd64 Packages *** 2.59-4ubuntu0.2 0 500 http://archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages 100 /var/lib/dpkg/status [hloeung@dziban ~]$ apt-cache policy dnsmasq-base dnsmasq-base: Installed: 2.59-4ubuntu0.2 Candidate: 2.59-4ubuntu0.3 Version table: 2.59-4ubuntu0.3 0 500 https://esm.ubuntu.com/ubuntu/ precise/main amd64 Packages *** 2.59-4ubuntu0.2 0 500 http://archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages 100 /var/lib/dpkg/status ** Affects: dnsmasq (Ubuntu) Importance: Medium Assignee: Leonidas S. Barbosa (leosilvab) Status: In Progress ** Changed in: dnsmasq (Ubuntu) Status: New => In Progress ** Information type changed from Public to Private Security ** Changed in: dnsmasq (Ubuntu) Importance: Undecided => Medium ** Changed in: dnsmasq (Ubuntu) Assignee: (unassigned) => Leonidas S. Barbosa (leosilvab) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1741262 Title: regression in dnsmasq breaks DNS resolution for precise ESM To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1741262/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs