dnsmasq:fuzz_util: Heap-buffer-overflow in extract_name

Detailed Report: https://oss-fuzz.com/testcase?key=4599588072325120 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzutil Job Type: libfuzzerasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x607000000e6c Crash State: extractname hashquestions...

CVE-2021-45953

DISPUTED Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge."...

CVE-2021-45953

CVE-2021-45953 affects dnsmasq 2.86 with a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). Connected Nessus entries expand the family to multiple related CVEs (45951–45957) but note vendor stance that these may not represent real vulnerabilities. MARINER e...

CVE-2021-45953: Out-of-bounds Write

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...