Описание
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | deferred | 2025-10-29 |
| esm-infra-legacy/trusty | deferred | 2025-10-29 |
| esm-infra-legacy/xenial | deferred | 2025-10-29 |
| esm-infra/bionic | deferred | 2025-10-29 |
| esm-infra/focal | deferred | 2025-10-29 |
| esm-infra/xenial | ignored | end of ESM support, was deferred [2025-10-29] |
| jammy | deferred | 2025-10-29 |
| noble | deferred | 2025-10-29 |
| plucky | ignored | end of life, was deferred [2025-10-29] |
| questing | ignored | end of life, was deferred [2025-10-29] |
Показывать по
Связанные уязвимости
A heap-based buffer overflow vulnerability in dnsmasq within the parse_hex() function of src/util.c. When parsing malformed DHCP option values in configuration files, dnsmasq miscalculates the output length and writes beyond the allocated heap buffer. This can cause a crash (Denial of Service) and, in some cases, memory corruption that may enable arbitrary code execution. The flaw is triggered during configuration parsing, so an attacker who can supply or modify the dnsmasq configuration file could exploit it.
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities.
A vulnerability has been found in dnsmasq up to 2.73rc6. Affected is the function parse_hex of the file src/util.c of the component Config File Handler. The manipulation of the argument i leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.