tocsin

Alpine/dnsmasq: high 7.3

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-con

Action: Upgrade dnsmasq to 2.91-r1 or later.

Affected

introducedfixedlast affected
02.91-r1-

Fixed versions

2.91-r1

Sources

published · modified · JSON