43 matches found
PT-2021-2209
Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.83 Description A buffer overflow vulnerability was discovered in the way dnsmasq extracts names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies,...
UBUNTU-CVE-2020-25682
A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with arbitrary...
PT-2021-3538
Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.83 Description A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled. This issue is caused by the lack of length checks in the extract name function, which could be abused to make the code...