OSV-2022-785 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50617 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

OSV-2022-324 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46474 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

CVE-2021-45955

Dnsmasq 2.86 has a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real...

CVE-2021-45955

CVE-2021-45955 affects dnsmasq 2.86. The issue is a heap-based buffer overflow in resize_packet, triggered via FuzzResizePacket and fuzz_rfc1035.c, due to missing bounds check during pseudo header re-insertion. Public sources in connected documents confirm this specific function/file path and the...