Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2021-45957: oss-fuzz-vulns/OSV-2021-935.yaml at main · google/oss-fuzz-vulns

Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c).

CVE
#google#git

Permalink

Cannot retrieve contributors at this time

id: OSV-2021-935

summary: Heap-buffer-overflow in answer_request

details: |

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920

Crash type: Heap-buffer-overflow WRITE 1

Crash state:

answer_request

FuzzAnswerTheRequest

fuzz_rfc1035.c

modified: ‘2021-07-09T00:00:11.077111Z’

published: ‘2021-07-09T00:00:11.076648Z’

references:

- type: REPORT

url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920

affected:

- package:

name: dnsmasq

ecosystem: OSS-Fuzz

ranges:

- type: GIT

repo: git://thekelleys.org.uk/dnsmasq.git

events:

- introduced: 96f6444958c29a670f4254722d787f328153605c

versions:

- v2.86

- v2.86rc1

- v2.86rc2

- v2.86rc3

- v2.86test5

- v2.86test6

- v2.86test7

- v2.87test1

- v2.87test2

- v2.87test3

- v2.87test4

ecosystem_specific:

severity: HIGH

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907