Community Forum

FIrmware update for Arris router

New Poster

FIrmware update for Arris router

Are there any plans to update the firmware on the Arris modem/router to deal with the DnsMasq heap buffer overflow vulnerability?  It need to be updated to version 2.78 of DnsMasq that was release in October 2017 to correct this vulnerability.

New Poster

Re: FIrmware update for Arris router

Sad.  But something happened in the last 2 weeks to make my virus protection alert me that there was a problem with the router. 

Sadder still, when i call infinaty they knew nothing about this and had never heard of DnsMasq heap buffer overflow vulnerability.

New Poster

Re: FIrmware update for Arris router

virus alert from avast and comcast.pnganother virus alert.pnganother virus alert.png 2.png


@DrWhofirst w

@DrWhofirst wrote:

Sad.  But something happened in the last 2 weeks to make my virus protection alert me that there was a problem with the router. 

Sadder still, when i call infinaty they knew nothing about this and had never heard of DnsMasq heap buffer overflow vulnerability.

My sentiments exactly!  Smiley Sad
I've been experiencing incidents at which point i would turn on my computer and i literally would attempt to go on any website and it said, "that there seems to be a connection issue".
Then whenever i would attempt to trouble shoot that alleged "connection issue", it says that "there are no issues found"...
What makes this even stranger is that when i would check my "Arris xfinity router/modem" all the lights were flashing normally as if i had no connection issues.... 
Typically, how i would resolve that issue would be that:

 

  • i would restart my p.c and then attempt to login to a website again, and then there would be no further connection issues.
  • I would disconnect and reconnect my cable wire from the modem 
  • I would call the xfinity customer service phone number and have the BOT send me a refresh signal 


But whats even more bizzare is that this very same issue has happened to me, recently, on multiple occasions. 
Specifically, whenever im away from the computer for a couple of days and whenever i attempt to connect to websites, the issue happens all over again. 
Thats what prompted me to do a scan on my computer using avast anti-virus.
Thus, to my suprise, i was astonished that one critical issue was this "dnsmasq software version 2.78"  needs to be updated. Unfortunately, everyone seems to be at the whim of xfinity to get this Important issue resolved.
Hopefully this thread get's viewed by the technical staff over at xfinity. 
This is serious!Cat Indifferent




 

Silver Problem Solver

Re: FIrmware update for Arris router

Did you google "dnsmasq software version 2.78"?


I am not a Comcast employee; I am just a customer, volunteering my time to help other customers here in the Forums.
Diamond Problem Solver

Re: FIrmware update for Arris router


@RobertWy wrote:

Did you google "dnsmasq software version 2.78"?


Only Comcast can update the firmware loads in combo gateway devices.

New Poster

Re: FIrmware update for Arris router

 

Good Afternoon!

Thank you for the Prompt reply!

Did you google "dnsmasq software version 2.78"?

Yes, i have and i've bulleted the webpages below:

But, My concern is, on the sites on the above aforementioned,

it states that "dnsmasq software versions 2.77" or below are malicious.
So, Does anyone here recommend downloading the "dnsmasq software version 2.78"? is it safe?

or
Is this an issue that comcast/xfinity deal's with directly?

also
Does this mean that i'm not on a secure connection network? 

* I'm fairly not that familiar with issues like these....

the only reason i even looked into this was after my anti-virus scan. *Cat Surprised