{"id":"OSV-2022-572","aliases":[],"status":"published","title":"Heap-buffer-overflow in dhcp_reply","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndhcp_reply\ndhcp_packet\nFuzzDhcp\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-07-12T00:00:45.818288Z","modified":"2025-07-01T14:24:05Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"dnsmasq","ranges":[{"type":"GIT","events":[{"introduced":"20b4a4ea5b19f3143add1342dde74a0be2b30a86"},{"introduced":"151d7dc5eaabb38a2a7cb2ace72fe8860f4415ae"},{"fixed":"ec8f3e65c19e8dee114e31759d447926d3ebd7cf"}]}],"versions":["v2.87","v2.87rc1","v2.87test9","v2.88","v2.88rc1","v2.88rc2","v2.88rc3","v2.88rc4","v2.88rc5","v2.88test1","v2.88test2","v2.88test3","v2.89","v2.89test1","v2.90","v2.90deb2","v2.90test1","v2.90test2","v2.90test3","v2.90test4","v2.91","v2.91rc1","v2.91rc2","v2.91rc3","v2.91rc4","v2.91rc5","v2.91rc6","v2.91test1","v2.91test10","v2.91test2","v2.91test4","v2.91test5","v2.91test6","v2.91test7","v2.91test8","v2.91test9","v2.92test1","v2.92test10","v2.92test11","v2.92test12","v2.92test13","v2.92test2","v2.92test3","v2.92test4","v2.92test5","v2.92test6","v2.92test7","v2.92test8","v2.92test9"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-572","title":"Heap-buffer-overflow in dhcp_reply","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndhcp_reply\ndhcp_packet\nFuzzDhcp\n```\n","status":"published","published":"2022-07-12T00:00:45.818288Z","modified":"2025-07-01T14:24:05.029738Z","updated_at":"2026-11-02T15:52:49.511349Z"}]}}