OSV-2022-312

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2022-312.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-312
Published
2022-04-07T00:00:40.457052Z
Modified
2026-07-07T14:12:33.519456Z
Summary
Heap-buffer-overflow in dhcp_reply
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46416

Crash type: Heap-buffer-overflow READ 1 Crash state: dhcpreply dhcppacket FuzzDhcp

References

Affected packages

OSS-Fuzz / dnsmasq

Package

Name
dnsmasq
Purl
pkg:generic/dnsmasq

Affected ranges

Type
GIT
Repo
git://thekelleys.org.uk/dnsmasq.git
Events
Introduced
03345ecefeb0d82e3c3a4c28f27c3554f0611b39

Affected versions

v2.*
v2.87
v2.87rc1
v2.87test9
v2.88
v2.88rc1
v2.88rc2
v2.88rc3
v2.88rc4
v2.88rc5
v2.88test1
v2.88test2
v2.88test3
v2.89
v2.89test1
v2.90
v2.90deb2
v2.90test1
v2.90test2
v2.90test3
v2.90test4
v2.91
v2.91rc1
v2.91rc2
v2.91rc3
v2.91rc4
v2.91rc5
v2.91rc6
v2.91test1
v2.91test10
v2.91test2
v2.91test4
v2.91test5
v2.91test6
v2.91test7
v2.91test8
v2.91test9
v2.92
v2.92rc1
v2.92rc2
v2.92rc3
v2.92test1
v2.92test10
v2.92test11
v2.92test12
v2.92test13
v2.92test14
v2.92test15
v2.92test16
v2.92test17
v2.92test18
v2.92test19
v2.92test2
v2.92test20
v2.92test21
v2.92test22
v2.92test3
v2.92test4
v2.92test5
v2.92test6
v2.92test7
v2.92test8
v2.92test9
v2.93
v2.93rc1
v2.93rc2
v2.93rc3
v2.93test1
v2.93test10
v2.93test2
v2.93test3
v2.93test4
v2.93test5
v2.93test6
v2.93test7
v2.93test8
v2.93test9

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2022-312.yaml"