Linux Distros Unpatched Vulnerability : CVE-2021-45955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dnsmasq 2.86 has a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c because of the lack of a proper bounds check upon...

The vulnerability of the `resize_packet` function in the `fuzz_rfc1035.c` component of the DNS server Dnsmasq allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the resizepacket function in the fuzzrfc1035.c component of the DNS server Dnsmasq is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

SUSE CVE-2021-45955

Dnsmasq 2.86 has a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real...

Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities to the best of our knowledge." However a contributor states that a security patch (mentioned in 016162.html) is needed

...

AZL-8962 CVE-2021-45955 affecting package dnsmasq for versions less than 2.89-2

Dnsmasq 2.86 has a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real...

Dnsmasq 缓冲区错误漏洞

dnsmasq is a lightweight DNS forwarding and DHCP, TFTP server written in C. Dnsmasq 2.86 suffers from a buffer error vulnerability that stems from having a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c...

PT-2021-7706 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the resize packet function of the fuzz rfc1035.c component of the Dnsmasq DNS server. Exploitation of this issue may allow a remote attacker to...