AZL-8962 CVE-2021-45955 affecting package dnsmasq for versions less than 2.89-2

🗓️ 01 Jan 2022 00:15:08Reported by GoogleType

Dnsmasq below 2.89-2 has heap overflow in resize_packet due to bounds check failure on pseudo header

Reporter	Title	Published	Views	Family All 27
AlpineLinux	CVE-2021-45955	1 Jan 202200:15	–	alpinelinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
CBLMariner	CVE-2021-45955 affecting package dnsmasq for versions less than 2.89-2	16 Apr 202300:48	–	cbl_mariner
CNNVD	Dnsmasq 缓冲区错误漏洞	1 Jan 202200:00	–	cnnvd
CVE	CVE-2021-45955	31 Dec 202123:53	–	cve
Cvelist	CVE-2021-45955	31 Dec 202123:53	–	cvelist
Debian CVE	CVE-2021-45955	31 Dec 202123:53	–	debiancve
Tenable Nessus	dnsmasq 2.86 Multiple Vulnerabilities	9 Feb 202200:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-45955	27 Aug 202500:00	–	nessus
Microsoft CVE	Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities to the best of our knowledge." However a contributor states that a security patch (mentioned in 016162.html) is needed	16 Mar 202207:00	–	mscve