Log in Start free

Vulnerability · Published Dec 31, 2021 · Assigned by mitre

CVE-2021-45955

Critical 9.8

In plain English

A critical-severity security flaw in the affected software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)2.6%top 14.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge." However, a contributor states that a security patch (mentioned in 016162.html) is needed

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References