WIKIABOUT

FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14086 questions

16729 answers

27457 comments

53738 members

Most popular tags

rut955 rut240 rut950 rutx11 rms vpn to wifi openvpn not sms trb140 firmware connection ipsec - on rutx12 rutx09 modbus

Security Advisory 2021-01-19-1 from Openwrt

0 votes
188 views 1 comments
by

I have recently have issues that pages sometimes take long time to load. After digging through the logs in the RUTX11-router I found some suscpicious errors.

After googling the errors I found out that the RUTX11 device doesn't have the patched dnsmasq for miltigating the issues with DNSpooq

https://openwrt.org/advisory/2021-01-19-1

These are the errors in the log I'm seeing:

Apr  1 02:20:15 _gateway dnsmasq[4246]: failed to send packet: Network unreachable
Apr  1 02:20:17 _gateway dnsmasq[4246]: failed to send packet: Address family not supported by protocol
Apr  1 02:20:18 _gateway dnsmasq[4246]: failed to send packet: Address family not supported by protocol
Apr  1 02:20:18 _gateway dnsmasq[4246]: failed to send packet: Address family not supported by protocol
Apr  1 02:20:22 _gateway dnsmasq[4246]: failed to send packet: Address family not supported by protocol
Apr  1 02:20:35 _gateway dnsmasq[4246]: failed to send packet: Network unreachable
Apr  1 02:20:35 _gateway dnsmasq[4246]: failed to send packet: Network unreachable
Apr  1 02:20:36 _gateway dnsmasq[4246]: failed to send packet: Address family not supported by protocol
Apr  1 02:20:36 _gateway dnsmasq[4246]: failed to send packet: Address family not supported by protocol

I also notice that this is also unpatched on the router:

https://openwrt.org/advisory/2020-12-09-1

It's a bit annoying that the router doesn't get faster updates regarding the security issues.

The latest openwrt stable version is 19.07.7, but my device is still on 19.07.4 eventhough I run the latest firmware.

1 Answer

0 votes
by
Hi,

Sorry for the issues you've encountered.

OpenWRT is not updated instantly as it could break some of the functions that we develop ourselves.

So in the future, there should be an update for OpenWRT, but it will never be the latest one.

EB.
by
Hello,

Thanks for fast reply. It's understandable it will take a while to get the latest version. But the dnsmasq issue has seven CVEs associated to it and later versions have also solved my issue having dual stack ipv4 and 6.

Do you have any internal beta version I can be your guinnea pig.