CVE-2021-45955: oss-fuzz-vulns/OSV-2021-932.yaml at main · google/oss-fuzz-vulns

Permalink

Cannot retrieve contributors at this time

id: OSV-2021-932

summary: Heap-buffer-overflow in resize_packet

details: |

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35898

Crash type: Heap-buffer-overflow WRITE {*}

Crash state:

resize_packet

FuzzResizePacket

fuzz_rfc1035.c

modified: ‘2021-10-08T00:05:03.400974Z’

published: ‘2021-07-08T00:01:25.139349Z’

references:

- type: REPORT

url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35898

affected:

- package:

name: dnsmasq

ecosystem: OSS-Fuzz

ranges:

- type: GIT

repo: git://thekelleys.org.uk/dnsmasq.git

events:

- introduced: 96f6444958c29a670f4254722d787f328153605c

versions:

- v2.86

- v2.86rc1

- v2.86rc2

- v2.86rc3

- v2.86test5

- v2.86test6

- v2.86test7

- v2.87test1

- v2.87test2

- v2.87test3

- v2.87test4

ecosystem_specific:

severity: HIGH