DNSmasq VMG8924-B10A

seamouse852

Hello,

I just changed my AV software to avast - on scanning it brings up an issue with the router, saying that there is a vulnerability with the DNSmasq - DnsMasq heap buffer overflow vulnerability apparently.

"To solve the vulnerability on your device, apply the firmware or system update that contains DnsMasq software version 2.78 or higher provided by your device's manufacturer."

I have the latest router firmware, and have read a Zyxel blogpost saying they were aware of this issue a year ago and that for my router this was fixed in the previous patch to the one I have.

So, seemingly nothing to worry about - is this a question of Avast creating an issue or should I be concerned?

Thanks a lot!

#CPE_Dec_2018

seamouse852

BTW - Current Firmware Version: 1.00(AAKL.21)C0

Zyxel_Support_CPE

Hi seamouse852,

Yes, for VMG8924-B10A we already add patches to fix in 1.00(AAKL.20)C0 fw and newer versions. So if some antiviruses only check dnsmasq versions, that may receive this message.

Hope you can understand it.