SUSE CVE-2021-45954

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from answerauth and FuzzAuth. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities to the best of our knowledge.

...

dnsmasq:fuzz_auth: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=4920977847353344 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzauth Job Type: libfuzzerubsandnsmasq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffd4db86 Crash State: unsigned long...

dnsmasq:fuzz_auth: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5948893970956288 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzauth Job Type: libfuzzerubsandnsmasq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000023ae3c0 Crash State: NULL Sanitizer: undefined UBSAN Recommended...