OSV-2022-572

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2022-572.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-572
Published
2022-07-12T00:00:45Z
Modified
2025-07-01T14:24:05Z
Summary
Heap-buffer-overflow in dhcp_reply
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002

Crash type: Heap-buffer-overflow READ 1
Crash state:
dhcp_reply
dhcp_packet
FuzzDhcp
References

Affected packages

OSS-Fuzz / dnsmasq

Package

Name
dnsmasq
Purl
pkg:generic/dnsmasq

Affected ranges

Type
GIT
Repo
git://thekelleys.org.uk/dnsmasq.git
Events
Introduced
20b4a4ea5b19f3143add1342dde74a0be2b30a86
Introduced
151d7dc5eaabb38a2a7cb2ace72fe8860f4415ae
Fixed
ec8f3e65c19e8dee114e31759d447926d3ebd7cf

Affected versions

v2.*
v2.87
v2.87rc1
v2.87test9
v2.88
v2.88rc1
v2.88rc2
v2.88rc3
v2.88rc4
v2.88rc5
v2.88test1
v2.88test2
v2.88test3
v2.89
v2.89test1
v2.90
v2.90deb2
v2.90test1
v2.90test2
v2.90test3
v2.90test4
v2.91
v2.91rc1
v2.91rc2
v2.91rc3
v2.91rc4
v2.91rc5
v2.91rc6
v2.91test1
v2.91test10
v2.91test2
v2.91test4
v2.91test5
v2.91test6
v2.91test7
v2.91test8
v2.91test9
v2.92test1
v2.92test10
v2.92test11
v2.92test12
v2.92test13
v2.92test2
v2.92test3
v2.92test4
v2.92test5
v2.92test6
v2.92test7
v2.92test8
v2.92test9

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"09d741f58a50f7e9ec2d6e0634f8ab5b11a7de5f:ec8f3e65c19e8dee114e31759d447926d3ebd7cf"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2022-572.yaml"