CVE-2022-0934

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
Affected Products (NVD)
VendorProductVersion
thekelleysdnsmasq
𝑥
< 2.87
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
dnsmasq
bookworm
2.89-1
fixed
bullseye
no-dsa
buster
no-dsa
sid
2.90-4
fixed
stretch
no-dsa
trixie
2.90-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dnsmasq
bionic
Fixed 2.79-1ubuntu0.6
released
focal
Fixed 2.80-1.1ubuntu1.5
released
impish
Fixed 2.85-1ubuntu2.1
released
jammy
Fixed 2.86-1.1ubuntu0.1
released
kinetic
Fixed 2.86-1.1ubuntu1
released
trusty
Fixed 2.68-1ubuntu0.2+esm1
released
xenial
Fixed 2.75-1ubuntu0.16.04.10+esm1
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
dnsmasq
RHEL 8
0:2.79-24.el8
fixed
RHEL 8.6 AUS
0:2.79-21.el8_6.5
fixed
RHEL 8.6 E4S
0:2.79-21.el8_6.5
fixed
RHEL 8.6 EUS
0:2.79-21.el8_6.5
fixed
RHEL 8.6 TUS
0:2.79-21.el8_6.5
fixed
RHEL 9
0:2.85-5.el9
fixed
dnsmasq-utils
RHEL 8
0:2.79-24.el8
fixed
RHEL 8.6 AUS
0:2.79-21.el8_6.5
fixed
RHEL 8.6 E4S
0:2.79-21.el8_6.5
fixed
RHEL 8.6 EUS
0:2.79-21.el8_6.5
fixed
RHEL 8.6 TUS
0:2.79-21.el8_6.5
fixed
RHEL 9
0:2.85-5.el9
fixed
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2022-0934
https://bugzilla.redhat.com/show_bug.cgi?id=2057075
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.html
https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=03345ecefeb0d82e3c3a4c28f27c3554f0611b39
https://access.redhat.com/security/cve/CVE-2022-0934
https://bugzilla.redhat.com/show_bug.cgi?id=2057075
https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.html
https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=03345ecefeb0d82e3c3a4c28f27c3554f0611b39