tocsin

Debian/dnsmasq: high 8.4

A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.

Action: Upgrade dnsmasq to 2.90-4~deb12u2 or later.

Affected

introducedfixedlast affected
02.90-4~deb12u2-

Fixed versions

2.90-4~deb12u2

Sources

published · modified · JSON