Headline
CVE-2021-45957: oss-fuzz-vulns/OSV-2021-935.yaml at main · google/oss-fuzz-vulns
Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c).
Permalink
Cannot retrieve contributors at this time
id: OSV-2021-935
summary: Heap-buffer-overflow in answer_request
details: |
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
answer_request
FuzzAnswerTheRequest
fuzz_rfc1035.c
modified: ‘2021-07-09T00:00:11.077111Z’
published: ‘2021-07-09T00:00:11.076648Z’
references:
- type: REPORT
url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920
affected:
- package:
name: dnsmasq
ecosystem: OSS-Fuzz
ranges:
- type: GIT
repo: git://thekelleys.org.uk/dnsmasq.git
events:
- introduced: 96f6444958c29a670f4254722d787f328153605c
versions:
- v2.86
- v2.86rc1
- v2.86rc2
- v2.86rc3
- v2.86test5
- v2.86test6
- v2.86test7
- v2.87test1
- v2.87test2
- v2.87test3
- v2.87test4
ecosystem_specific:
severity: HIGH