Skip to main content

Out-of-bounds Write


Severity High
Score 9.8/10


** DISPUTED ** Dnsmasq versions 2.86rc1 through 2.87test8 have a heap-based buffer overflow in "resize_packet" called from "FuzzResizePacket" and "fuzz_rfc1035.c" because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge." However, a contributor states that a security patch (mentioned in 016162.html) is needed.

  • LOW
  • HIGH
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-787 - Out-of-Bounds Write

Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.

Advisory Timeline

  • Published