OSV-2022-572 Heap-buffer-overflow in dhcp_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002 Crash type: Heap-buffer-overflow READ 1 Crash state: dhcpreply dhcppacket FuzzDhcp...

dnsmasq:fuzz_dhcp: Heap-buffer-overflow in dhcp_reply

Detailed Report: https://oss-fuzz.com/testcase?key=5492814284193792 Project: dnsmasq Fuzzing Engine: honggfuzz Fuzz Target: fuzzdhcp Job Type: honggfuzzasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6160000005a4 Crash State: dhcpreply dhcppacket FuzzDhcp...

dnsmasq:fuzz_dhcp: Heap-buffer-overflow in dhcp_reply

Detailed Report: https://oss-fuzz.com/testcase?key=5341114007158784 Project: dnsmasq Fuzzing Engine: honggfuzz Fuzz Target: fuzzdhcp Job Type: honggfuzzasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6160000005a4 Crash State: dhcpreply dhcppacket FuzzDhcp...

OSV-2022-145 Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44581 Crash type: Heap-buffer-overflow WRITE 4 Crash state: printmac logpacket dhcpreply...

CVE-2021-45952

Dnsmasq 2.86 has a heap-based buffer overflow in dhcpreply called from dhcppacket and FuzzDhcp. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45956

Dnsmasq 2.86 has a heap-based buffer overflow in printmac called from logpacket and dhcpreply. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

OSV-2022-12 Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43304 Crash type: Heap-buffer-overflow WRITE 4 Crash state: printmac logpacket dhcpreply...

OSV-2022-11 Heap-buffer-overflow in dhcp_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43300 Crash type: Heap-buffer-overflow WRITE Crash state: dhcpreply dhcppacket FuzzDhcp...

dnsmasq:fuzz_dhcp: Heap-buffer-overflow in dhcp_reply

Detailed Report: https://oss-fuzz.com/testcase?key=5653342787862528 Project: dnsmasq Fuzzing Engine: afl Fuzz Target: fuzzdhcp Job Type: aflasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x612000000822 Crash State: dhcpreply dhcppacket FuzzDhcp Sanitizer:...

CVE-2021-45956

Dnsmasq 2.86 has a heap-based buffer overflow in printmac called from logpacket and dhcpreply. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45952

Dnsmasq 2.86 has a heap-based buffer overflow in dhcpreply called from dhcppacket and FuzzDhcp. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

AZL-8963 CVE-2021-45956 affecting package dnsmasq for versions less than 2.89-1

Dnsmasq 2.86 has a heap-based buffer overflow in printmac called from logpacket and dhcpreply. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45952

Dnsmasq 2.86 has a heap-based buffer overflow in dhcpreply called from dhcppacket and FuzzDhcp. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45952

DISPUTED Dnsmasq 2.86 has a heap-based buffer overflow in dhcpreply called from dhcppacket and FuzzDhcp. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge."...

CVE-2021-45956

Dnsmasq 2.86 has a heap-based buffer overflow in printmac called from logpacket and dhcpreply. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45952

Dnsmasq 2.86 has a heap-based buffer overflow in dhcpreply called from dhcppacket and FuzzDhcp. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45952

CVE-2021-45952 affects dnsmasq 2.86 with a heap-based buffer overflow in dhcp_reply (triggered via dhcp_packet/FuzzDhcp). Public references confirm this family includes related CVEs and vendor remarks that 45951–45957 may not represent real vulnerabilities. For mitigation, some sources (CBLMARINE...

CVE-2021-45952

Removed by vendor...

CVE-2021-45956

CVE-2021-45956 affects dnsmasq 2.86 with a heap-based buffer overflow in print_mac (triggered from log_packet and dhcp_reply). The vendor notes CVE-2021-45951 through CVE-2021-45957 may not represent real vulnerabilities. Public-internal notes in connected docs show related entries and unpatched-...

CVE-2021-45956

Dnsmasq 2.86 has a heap-based buffer overflow in printmac called from logpacket and dhcpreply. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...