Arbitrary Code Execution

2021-01-2016:41:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.085 Low

EPSS

Percentile

94.5%

JSON

dnsmasq is vulnerable to arbitrary code execution. A heap-based buffer overflow in rfc1035.c:extract_name() due to the lack of length checks, which could be abused occurs when DNSSEC is enabled and before the receiving DNS entries are validated. A remote attacker who can create valid DNS replies is able to exploit the vulnerability execute arbitrary code via memcpy() using negative size in sort_rrset().

CPENameOperatorVersion
dnsmasq:3.12eq2.81-r0
dnsmasq:groovyeq2.81-4build1
dnsmasq:groovyeq2.82-1ubuntu1
dnsmasq:focaleq2.80-1.1ubuntu1
dnsmasq:xenialeq2.75-1ubuntu0.16.04.5
dnsmasq:sideq2.82-1
dnsmasqeq2.79__11.el8
dnsmasqeq2.79__6.el8
dnsmasqeq2.79__11.el8_2.1
dnsmasqeq2.79__4.el8

Name	Operator	Version
dnsmasq:3.12	eq	2.81-r0
dnsmasq:groovy	eq	2.81-4build1
dnsmasq:groovy	eq	2.82-1ubuntu1
dnsmasq:focal	eq	2.80-1.1ubuntu1
dnsmasq:xenial	eq	2.75-1ubuntu0.16.04.5
dnsmasq:sid	eq	2.82-1
dnsmasq	eq	2.79__11.el8
dnsmasq	eq	2.79__6.el8
dnsmasq	eq	2.79__11.el8_2.1
dnsmasq	eq	2.79__4.el8