# Dnsmsaq Vulnerability

**URL:** <https://discourse.pi-hole.net/t/dnsmsaq-vulnerability/5045>\
**Category:** General\
**Created:** [October 6, 2017, 3:17pm UTC](https://discourse.pi-hole.net/t/dnsmsaq-vulnerability/5045 "2017-10-06T15:17:27Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sdebby](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/sdebby/32/1993_2.png) [@sdebby](https://discourse.pi-hole.net/u/sdebby)\
**Post date:** [October 6, 2017, 3:17pm UTC](https://discourse.pi-hole.net/t/dnsmsaq-vulnerability/5045/1 "2017-10-06T15:17:27Z")

</div>

Hi  
I use pi-hole on my RPi- work perfect, but I discovered that the DNS server it uses dnsmsaq- have version 2.76, that have multiple vulnerabilities, including criticals  
[https://www.exploit-db.com/exploits/42941/](https://www.exploit-db.com/exploits/42941/)

> **[Behind the Masq: Yet more DNS, and DHCP, vulnerabilities](https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html)**
>
> Posted by Fermin J. Serna, Staff Software Engineer, Matt Linton, Senior Security Engineer and Kevin Stadmeyer, Technical Program Manager O...

The recommendation is to update it to ver 2.78.

Can I update it manually, or need to update pi-hole package?

---

<div class="post-metadata">

**Author:** ![mibere](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mibere/32/18057_2.png) [@mibere](https://discourse.pi-hole.net/u/mibere)\
**Post date:** [October 6, 2017, 3:25pm UTC](https://discourse.pi-hole.net/t/dnsmsaq-vulnerability/5045/2 "2017-10-06T15:25:22Z")

</div>

They are fixed with 2.76-5+deb9u1 (the current version in the Debian 9.1 / Raspbian repository), see [https://www.debian.org/security/2017/dsa-3989](https://www.debian.org/security/2017/dsa-3989)

---

<div class="post-metadata">

**Author:** ![sdebby](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/sdebby/32/1993_2.png) [@sdebby](https://discourse.pi-hole.net/u/sdebby)\
**Post date:** [October 6, 2017, 3:34pm UTC](https://discourse.pi-hole.net/t/dnsmsaq-vulnerability/5045/3 "2017-10-06T15:34:35Z")

</div>

I see,  
So if I am using the most updated ver of raspbian, I am covered ? as the vulnerability fixed in the OS level ?

---

<div class="post-metadata">

**Author:** ![sprocket](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/s/bcef8e/32.png) [@sprocket](https://discourse.pi-hole.net/u/sprocket)\
**Post date:** [October 6, 2017, 6:44pm UTC](https://discourse.pi-hole.net/t/dnsmsaq-vulnerability/5045/4 "2017-10-06T18:44:41Z")

</div>

It is fixed at the OS level, and you need to update your OS to the most current. There are two ways to update your Pi:

- If you have your Pi set up as a server (with no display or keyboard attached) you'll want to run a terminal emulator on your PC (like Putty on a PC, or on a Mac, just use the built-in Terminal utility), point it at your Pi's IP address, log into the console as username "pi". (I use SSH as the protocol - on the Mac the command to connect is "ssh pi@[your Pi's IP address]" after which you'll be prompted for your password to log in.)

Then issue the commands:

1. sudo apt-get update (this updates the list of files that are in the repository maintained by the Raspbian team)
2. sudo apt-get upgrade (this downloads the latest versions of all the files that need to be upgraded, and performs the upgrade)

You might get a prompt asking if you want to change a configuration file - reply "n" (this is the default, and keeps any changes that may have been made along the way in your config files)

- If you have your Pi set up with a display, keyboard and mouse, you can use Synaptics (one of the GUI system utilities) to update/upgrade.

Upgrades like this are a good habit to get into, every month or so. Even if your Pi is set up as a server and is behind your firewall, it never hurts to keep current.

---

<div class="post-metadata">

**Author:** ![sdebby](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/sdebby/32/1993_2.png) [@sdebby](https://discourse.pi-hole.net/u/sdebby)\
**Post date:** [October 7, 2017, 5:36am UTC](https://discourse.pi-hole.net/t/dnsmsaq-vulnerability/5045/5 "2017-10-07T05:36:05Z")

</div>

Got it.  
Thank you  
I will update the OS