Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

thekelleys dnsmasq vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2009-2957
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq prior to 2.50, when --enable-tftp is used, might allow remote malicious users to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.
Thekelleys Dnsmasq 2.48Thekelleys Dnsmasq 2.47Thekelleys Dnsmasq 2.35Thekelleys Dnsmasq 2.22Thekelleys Dnsmasq 2.34Thekelleys Dnsmasq 2.33Thekelleys Dnsmasq 2.31Thekelleys Dnsmasq 2.23Thekelleys Dnsmasq 2.21Thekelleys Dnsmasq 2.14Thekelleys Dnsmasq 2.13Thekelleys Dnsmasq 2.5Thekelleys Dnsmasq 2.4Thekelleys Dnsmasq 1.16Thekelleys Dnsmasq 1.15Thekelleys Dnsmasq 1.8Thekelleys Dnsmasq 1.7Thekelleys Dnsmasq 0.992Thekelleys Dnsmasq 0.98Thekelleys DnsmasqThekelleys Dnsmasq 2.44Thekelleys Dnsmasq 2.43
4.3
CVSSv2
CVE-2009-2958
The tftp_request function in tftp.c in dnsmasq prior to 2.50, when --enable-tftp is used, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.
Thekelleys Dnsmasq 2.45Thekelleys Dnsmasq 2.44Thekelleys Dnsmasq 2.40Thekelleys Dnsmasq 2.39Thekelleys Dnsmasq 2.29Thekelleys Dnsmasq 2.28Thekelleys Dnsmasq 2.19Thekelleys Dnsmasq 2.18Thekelleys Dnsmasq 2.43Thekelleys Dnsmasq 2.42Thekelleys Dnsmasq 2.38Thekelleys Dnsmasq 2.37Thekelleys Dnsmasq 2.36Thekelleys Dnsmasq 2.27Thekelleys Dnsmasq 2.26Thekelleys Dnsmasq 2.17Thekelleys Dnsmasq 2.16Thekelleys Dnsmasq 2.9Thekelleys Dnsmasq 2.8Thekelleys Dnsmasq 2.7Thekelleys Dnsmasq 2.0Thekelleys Dnsmasq 1.18
5
CVSSv2
CVE-2013-0198
Dnsmasq prior to 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote malicious users to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists be...
Thekelleys Dnsmasq
5
CVSSv2
CVE-2017-15107
A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
Thekelleys Dnsmasq
NA
CVE-2023-28450
An issue exists in Dnsmasq prior to 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.
Thekelleys Dnsmasq
5
CVSSv2
CVE-2005-0877
Dnsmasq prior to 2.21 allows remote malicious users to poison the DNS cache via answers to queries that were not made by Dnsmasq.
Thekelleys Dnsmasq
7.8
CVSSv2
CVE-2008-3214
dnsmasq 2.25 allows remote malicious users to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
Thekelleys Dnsmasq 2.25
7.5
CVSSv2
CVE-2021-45954
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Thekelleys Dnsmasq 2.86
7.5
CVSSv2
CVE-2021-45957
Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Thekelleys Dnsmasq 2.86
7.5
CVSSv2
CVE-2021-45952
Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.
Thekelleys Dnsmasq 2.86
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook