Arbitrary Code Execution

dnsmasq is vulnerable to arbitrary code execution. Core Security Technologies discovered a heap overflow flaw in dnsmasq when the TFTP service is enabled (the “–enable-tftp” command line option, or by enabling “enable-tftp” in “/etc/dnsmasq.conf”). If the configured tftp-root is sufficiently long, and a remote user sends a request that sends a long file name, dnsmasq could crash or, possibly, execute arbitrary code with the privileges of the dnsmasq service (usually the unprivileged “nobody” user).