Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-45956 EUVD-2021-32663GHSA-c76g-xw7w-9qj6

Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE…

Published Dec 31, 2021 · Updated Oct 28, 2024 · Assigned by mitre

Package: dnsmasq Ecosystem: Azure Linux

Description

Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) dnsmasq 2.89-1 —

References