| Package | Affected versions | Patched versions |
|---|---|---|
| dnsmasq | = 0.4= 0.5= 0.6= 0.7= 0.95= 0.96= 0.98= 0.992= 0.996= 1.0= 1.10= 1.11= 1.12= 1.13= 1.14= 1.15= 1.16= 1.17= 1.18= 1.2= 1.3= 1.4= 1.5= 1.6= 1.7= 1.8= 1.9= 2.0= 2.1= 2.10= 2.11= 2.12= 2.13= 2.14= 2.15= 2.16= 2.17= 2.18= 2.19= 2.2= 2.20= 2.21= 2.22= 2.23= 2.24= 2.25= 2.26= 2.27= 2.28= 2.29= 2.3= 2.30= 2.31= 2.33= 2.34= 2.35= 2.36= 2.37= 2.38= 2.39= 2.4= 2.40= 2.41= 2.42= 2.43= 2.44= 2.45= 2.46= 2.47= 2.48= 2.5= 2.6= 2.7= 2.8= 2.9≤ 2.49 |
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free