{"id":"CVE-2022-0934","aliases":["ALPINE-CVE-2022-0934","ALSA-2022:7633","ALSA-2022:8070","AZL-25317","BELL-CVE-2022-0934","CLSA-2026-1778157268","CLSA-2026-1792817189","CLSA-2026-1792817408","DEBIAN-CVE-2022-0934","DLA-3974-1","EUVD-2022-15955","GHSA-wpmh-x6rm-9p34","MGASA-2022-0233","OESA-2022-1761","RHSA-2022:7633","RHSA-2022:8070","RHSA-2024:1545","RLSA-2022:7633","RLSA-2022:8070","SUSE-SU-2022:1288-1","SUSE-SU-2022:1289-1","SUSE-SU-2022:1307-1","SUSE-SU-2022:14940-1","SUSE-SU-2022:14941-1","UBUNTU-CVE-2022-0934","USN-5408-1","openSUSE-SU-2024:11998-1"],"status":"published","title":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an...","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02644,"percentile":0.85813,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2022-04-07T00:00:00Z","modified":"2026-11-03T08:01:56Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dnsmasq","fixed_in":["2.86-r1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dnsmasq","fixed_in":["2.79-24.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dnsmasq-utils","fixed_in":["2.79-24.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dnsmasq","fixed_in":["2.85-5.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dnsmasq-utils","fixed_in":["2.85-5.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"dnsmasq","fixed_in":["2.89-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dnsmasq","fixed_in":["2.76-17.el7_9.3.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dnsmasq-utils","fixed_in":["2.76-17.el7_9.3.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dnsmasq","fixed_in":["2.87-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dnsmasq","fixed_in":["2.87-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.87-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"dnsmasq","fixed_in":["2.85-4.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"dnsmasq","fixed_in":["2.82-10.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"dnsmasq","fixed_in":["2.82-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"dnsmasq","fixed_in":["2.86-2.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq","fixed_in":["0:2.79-24.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debuginfo","fixed_in":["0:2.79-24.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debugsource","fixed_in":["0:2.79-24.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils","fixed_in":["0:2.79-24.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils-debuginfo","fixed_in":["0:2.79-24.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq","fixed_in":["0:2.85-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-debuginfo","fixed_in":["0:2.85-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-debugsource","fixed_in":["0:2.85-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-utils","fixed_in":["0:2.85-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-utils-debuginfo","fixed_in":["0:2.85-5.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dnsmasq","fixed_in":["0:2.79-24.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"dnsmasq","fixed_in":["0:2.85-5.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"dnsmasq","fixed_in":["2.86-150100.7.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","fixed_in":["2.68-1ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","fixed_in":["2.75-1ubuntu0.16.04.10+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","fixed_in":["2.79-1ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","fixed_in":["2.80-1.1ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"dnsmasq","fixed_in":["2.86-1.1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","fixed_in":["2.86-4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-24.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-24.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-5.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-5.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.89-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.el7_9.3.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.el7_9.3.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.0.3.el7_9.99.tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.0.3.el7_9.99.tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.0.3.el7_9.99.tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-17.0.3.el7_9.99.tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.87-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.87-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.87-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-1+deb11u1"}]}],"versions":["2.85-1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-4.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.82-10.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.82-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-2.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-24.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-24.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-24.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-24.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-24.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dnsmasq-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-21.el8_6.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.79-24.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.85-5.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-150000.3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-150000.3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-150000.3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-150000.3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-18.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-150100.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.16.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-0.17.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-1ubuntu0.2+esm1"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1","2.68-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.10+esm1"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8","2.75-1ubuntu0.16.04.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.6"}]}],"versions":["2.78-1","2.78-3","2.79-1","2.79-1ubuntu0.2","2.79-1ubuntu0.3","2.79-1ubuntu0.4","2.79-1ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-1.1ubuntu1.5"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1","2.80-1.1ubuntu1.2","2.80-1.1ubuntu1.3","2.80-1.1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-1.1ubuntu0.1"}]}],"versions":["2.85-1ubuntu2","2.86-1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-1ubuntu0.2+esm1"}]}],"versions":["2.66-4ubuntu1","2.67-1","2.68-1","2.68-1ubuntu0.1","2.68-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75-1ubuntu0.16.04.10+esm1"}]}],"versions":["2.75-1","2.75-1ubuntu0.16.04.1","2.75-1ubuntu0.16.04.2","2.75-1ubuntu0.16.04.3","2.75-1ubuntu0.16.04.4","2.75-1ubuntu0.16.04.5","2.75-1ubuntu0.16.04.7","2.75-1ubuntu0.16.04.8","2.75-1ubuntu0.16.04.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79-1ubuntu0.6"}]}],"versions":["2.78-1","2.78-3","2.79-1","2.79-1ubuntu0.2","2.79-1ubuntu0.3","2.79-1ubuntu0.4","2.79-1ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80-1.1ubuntu1.5"}]}],"versions":["2.80-1ubuntu2","2.80-1ubuntu4","2.80-1.1ubuntu1","2.80-1.1ubuntu1.2","2.80-1.1ubuntu1.3","2.80-1.1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-1.1ubuntu0.1"}]}],"versions":["2.85-1ubuntu2","2.86-1.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86-4.1"}]}]}],"products":[{"vendor":"dnsmasq","product":"dnsmasq"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"thekelleys","product":"dnsmasq"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057075","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Vendor Advisory","advisory","web","article","report"]},{"url":"https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=03345ecefeb0d82e3c3a4c28f27c3554f0611b39","tags":["x_refsource_MISC","x_transferred","Broken Link","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0934","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","report","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0934","tags":["web","advisory"]},{"url":"https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=03345ecefeb0d82e3c3a4c28f27c3554f0611b39"},{"url":"https://access.redhat.com/errata/RHSA-2022:7633","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8070","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wpmh-x6rm-9p34"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-0934","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2057075","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7633.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8070.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-0934","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1778157268.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792817189.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28450","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4892","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792817408.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0934","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0233.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30318","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1761","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2049691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120357","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7633.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0934","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120711","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8070.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1545","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263917","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1545.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28450","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28450","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vgrx-vhjf-p7wv","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50387","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50387","tags":["advisory"]},{"url":"https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released","tags":["article"]},{"url":"https://kb.isc.org/docs/cve-2023-50387","tags":["article"]},{"url":"https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50868","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2023-50868","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7633","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8070","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221288-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183709","tags":["report"]},{"url":"https://bugzilla.suse.com/1197872","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0934","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221289-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221307-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214940-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1138743","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214941-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0934","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5408-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-0934","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-08-29T14:03:02Z","modified":"2025-11-03T21:45:45.666Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-15955","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-08-29T14:03:02Z","modified":"2025-11-03T21:45:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-wpmh-x6rm-9p34","title":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an...","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-08-29T20:06:50Z","modified":"2025-11-04T00:30:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:25.970519Z"}],"nvd":[{"id":"CVE-2022-0934","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-08-29T15:15:10.087Z","modified":"2026-06-17T04:21:30.397Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:25.883929Z"}],"osv":[{"id":"ALPINE-CVE-2022-0934","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-08-29T15:15:10.087Z","modified":"2026-11-03T07:18:33.018233061Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-25317","title":"CVE-2022-0934 affecting package dnsmasq for versions less than 2.89-1","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-08-29T15:15:10Z","modified":"2026-04-21T04:23:03.911105Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2022-0934","title":"CVE-2022-0934 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:39.570786Z","modified":"2026-01-26T09:48:36.127415Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-0934","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-08-29T15:15:10.087Z","modified":"2026-04-16T04:36:05.787148496Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DEBIAN-CVE-2022-0934","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-08-29T15:15:10.087Z","modified":"2026-11-03T08:01:56.196497489Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-1761","title":"dnsmasq security update","description":"Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks.\r\n\r\nSecurity Fix(es):\r\n\r\nNo description is available for this CVE.(CVE-2022-0934)","status":"published","published":"2022-07-22T11:05:02Z","modified":"2026-08-18T01:16:49.874388395Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7633","title":"Red Hat Security Advisory: dnsmasq security and bug fix update","status":"published","published":"2024-09-16T08:01:45Z","modified":"2026-01-27T10:41:19.33812Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8070","title":"Red Hat Security Advisory: dnsmasq security and bug fix update","status":"published","published":"2024-09-16T08:01:51Z","modified":"2026-01-27T10:41:20.732756Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2024:1545","title":"Red Hat Security Advisory: dnsmasq security update","status":"published","published":"2024-09-16T17:54:10Z","modified":"2026-05-01T10:10:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RLSA-2022:7633","title":"Moderate: dnsmasq security and bug fix update","description":"The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:25:10Z","modified":"2026-02-04T20:15:13.966381Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8070","title":"Moderate: dnsmasq security and bug fix update","description":"The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:15:01Z","modified":"2026-02-04T20:30:11.058849Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-0934","description":"A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.","status":"published","published":"2022-04-07T00:00:00Z","modified":"2026-02-04T03:21:28.475949Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:7633","title":"Moderate: dnsmasq security and bug fix update","description":"The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:07.792114642Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8070","title":"Moderate: dnsmasq security and bug fix update","description":"The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:20.123791742Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2026-1778157268","title":"dnsmasq: Fix of CVE-2022-0934","description":"- CVE-2022-0934: Fix write-after-free in DHCPv6 relay handling that\n  could be triggered by a crafted packet, leading to denial of service\n- rfc3315: fix bad reply to DHCPCONFIRM messages (wrong message type)\n- rfc3315: fix integer underflow and heap overflow in log6_opts\n  STATUS_CODE\n- rfc3315: fix DHCPv6 \"use multicast\" response which previously failed","status":"published","published":"2026-05-08T11:50:59Z","modified":"2026-06-01T00:33:18.786620396Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1792817189","title":"dnsmasq: Fix of 4 CVEs","description":"- Build for rhel7els, oraclelinux7els and cloudlinux7els: they get the\n  existing fixes for CVE-2022-0934, CVE-2023-28450, CVE-2026-4890,\n  CVE-2026-4891 and CVE-2026-4892\n- Bump release to sort above Oracle Linux 7 dnsmasq-2.76-17.0.3.el7_9.3","status":"published","published":"2026-10-24T04:46:42Z","modified":"2026-10-26T09:31:57.387650231Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792817408","title":"dnsmasq: Fix of 5 CVEs","description":"- Build for rhel7els, oraclelinux7els and cloudlinux7els: they get the\n  existing fixes for CVE-2022-0934, CVE-2023-28450, CVE-2026-4890,\n  CVE-2026-4891 and CVE-2026-4892\n- Bump release to sort above Oracle Linux 7 dnsmasq-2.76-17.0.3.el7_9.3","status":"published","published":"2026-10-24T04:50:22Z","modified":"2026-10-26T09:32:01.321357103Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"DLA-3974-1","title":"dnsmasq - security update","status":"published","published":"2024-11-29T00:00:00Z","modified":"2026-03-09T01:17:49.023108Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2022-0233","title":"Updated dnsmasq packages fix security vulnerability","description":"A write after free has been discovered in DHCPv6 code. A special request\ncould be crafted to modify already freed memory. (CVE-2022-0934)\n","status":"published","published":"2022-06-18T21:30:41Z","modified":"2026-04-16T04:41:35.115186702Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11998-1","title":"dnsmasq-2.86-4.1 on GA media","description":"These are all security issues fixed in the dnsmasq-2.86-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:49.33067Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1288-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant\n  outgoing port being used when for certain use cases of the --server option\n  (bsc#1183709).\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n","status":"published","published":"2022-04-21T12:52:57Z","modified":"2026-02-04T02:35:08.019135Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1289-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant\n  outgoing port being used when for certain use cases of the --server option\n  (bsc#1183709).\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n","status":"published","published":"2022-04-21T12:54:28Z","modified":"2026-02-04T02:22:14.226835Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1307-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n","status":"published","published":"2022-04-22T13:30:05Z","modified":"2026-02-04T03:53:48.030641Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:14940-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant\n  outgoing port being used when for certain use cases of the --server option\n  (bsc#1183709).\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n\nNon-security fixes:\n\n- Removed cache size limit (bsc#1138743).\n","status":"published","published":"2022-04-21T12:55:50Z","modified":"2026-02-04T02:14:18.61644Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:14941-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues:\n\n- CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant\n  outgoing port being used when for certain use cases of the --server option\n  (bsc#1183709).\n- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial\n  of service via crafted packet (bsc#1197872).\n","status":"published","published":"2022-04-21T12:57:08Z","modified":"2026-02-04T03:39:00.573361Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5408-1","title":"dnsmasq vulnerability","description":"Petr Menšík and Richard Johnson discovered that Dnsmasq incorrectly handled\ncertain inputs. An attacker could possibly use this issue to execute\narbitrary code or expose sensitive information.\n","status":"published","published":"2022-05-10T17:44:53Z","modified":"2026-06-29T13:49:36.220550609Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}