Most recent entries from all

ALSA-2022:7633 — Moderate: dnsmasq security and bug fix update

Affected: AlmaLinux:8: dnsmasq, AlmaLinux:8: dnsmasq-utils

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-03253

Withdrawn: BELL-CVE-2022-0934 — CVE-2022-0934 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-0051 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta…

certfr-2023-avi-0051

Withdrawn: CLEANSTART-2026-KY78316 — dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DN…

Withdrawn by the publisher.

Affected: CleanStart: dnsmasq

Multiple security vulnerabilities affect the dnsmasq package. dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. See references for individual vulnerability details.

EUVD-2026-258326

fkie_cve-2022-0934

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

GHSA-wpmh-x6rm-9p34

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

gsd-2022-0934

msrc_CVE-2022-0934 — A single-byte non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a cr…

msrc_CVE-2022-0934

OESA-2022-1761 — dnsmasq security update

Affected: openEuler:20.03-LTS-SP1: dnsmasq, openEuler:20.03-LTS-SP3: dnsmasq, openEuler:22.03-LTS: dnsmasq

Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks. Security Fix(es): No description is available for this CVE.(CVE-2022-0934)

openSUSE-SU-2024:11998-1 — dnsmasq-2.86-4.1 on GA media

dnsmasq-2.86-4.1 on GA media

RHSA-2024:1545 — Red Hat Security Advisory: dnsmasq security update

dnsmasq: Heap use after free in dhcp6_no_relay dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

SUSE-SU-2022:1288-1 — Security update for dnsmasq

Security update for dnsmasq

UBUNTU-CVE-2022-0934

Affected: Ubuntu:Pro:14.04:LTS: dnsmasq, Ubuntu:Pro:16.04:LTS: dnsmasq, Ubuntu:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq, Ubuntu:22.04:LTS: dnsmasq

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

WID-SEC-W-2022-1988 — dnsmasq: Schwachstelle ermöglicht nicht spezifizierten Angriff

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dnsmasq ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.