CVE-2022-0934

Summary

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

Affected Software

Weaknesses

• CWE-416: CWE-416 - Use After Free

ADP Enrichment

CVE Program Container

Additional References

• https://bugzilla.redhat.com/show_bug.cgi?id=2057075
• https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.html
• https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=03345ecefeb0d82e3c3a4c28f27c3554f0611b39
• https://access.redhat.com/security/cve/CVE-2022-0934
• https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2057075
• https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.html
• https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=03345ecefeb0d82e3c3a4c28f27c3554f0611b39
• https://access.redhat.com/security/cve/CVE-2022-0934

• ←Previous
• Next→