thekelleys dnsmasq vulnerabilities and exploits

(subscribe to this query)

Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq prior to 2.50, when --enable-tftp is used, might allow remote malicious users to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.

Thekelleys Dnsmasq Thekelleys Dnsmasq 0.4 Thekelleys Dnsmasq 0.5 Thekelleys Dnsmasq 0.6 Thekelleys Dnsmasq 0.7 Thekelleys Dnsmasq 0.95 Thekelleys Dnsmasq 0.96 Thekelleys Dnsmasq 0.98 Thekelleys Dnsmasq 0.992 Thekelleys Dnsmasq 0.996 Thekelleys Dnsmasq 1.0 Thekelleys Dnsmasq 1.2

1 EDB exploit

The tftp_request function in tftp.c in dnsmasq prior to 2.50, when --enable-tftp is used, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.

Thekelleys Dnsmasq Thekelleys Dnsmasq 0.4 Thekelleys Dnsmasq 0.5 Thekelleys Dnsmasq 0.6 Thekelleys Dnsmasq 0.7 Thekelleys Dnsmasq 0.95 Thekelleys Dnsmasq 0.96 Thekelleys Dnsmasq 0.98 Thekelleys Dnsmasq 0.992 Thekelleys Dnsmasq 0.996 Thekelleys Dnsmasq 1.0 Thekelleys Dnsmasq 1.2

1 EDB exploit

An issue exists in Dnsmasq prior to 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

Thekelleys Dnsmasq

A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.

Thekelleys Dnsmasq

Dnsmasq prior to 2.21 allows remote malicious users to poison the DNS cache via answers to queries that were not made by Dnsmasq.

Thekelleys Dnsmasq

Dnsmasq prior to 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote malicious users to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists be...

Thekelleys Dnsmasq

dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.

Thekelleys Dnsmasq 2.9

dnsmasq 2.25 allows remote malicious users to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.

Thekelleys Dnsmasq 2.25

Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

Thekelleys Dnsmasq 2.86

Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our ...

Thekelleys Dnsmasq 2.86

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook