PT-2022-2741 · Dnsmasq+10 · Dnsmasq+10

Petr Menšík + 1 · Published 2022-02-22 · Updated 2025-06-10 · CVE-2022-0934

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions dnsmasq (affected versions not specified)

Description A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq, allowing an attacker to potentially cause a denial of service by sending a crafted packet processed by dnsmasq. The flaw is related to an error in memory usage after it has been freed, specifically in the processing of DHCPv6 requests. This can be exploited by a remote attacker to send specially crafted packets, causing a use-after-free error and resulting in a denial of service attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2022:7633

ALSA-2022:8070

ALT-PU-2022-2683

ALT-PU-2022-2830

ALT-PU-2022-3323

ALT-PU-2023-8012

AZL-25317

BDU:2022-03253

CESA-2022_7633

CVE-2022-0934

DLA-3974-1

MGASA-2022-0233

OESA-2022-1761

OPENSUSE-SU-2022_1307-1

OPENSUSE-SU-2024:11998-1

RHSA-2022:7633

RHSA-2022:8070

RHSA-2022_7633

RHSA-2022_8070

RHSA-2024:1545

RLSA-2022:7633

RLSA-2022:8070

SUSE-SU-2022:1288-1

SUSE-SU-2022:1289-1

SUSE-SU-2022:1307-1

SUSE-SU-2022:14940-1

SUSE-SU-2022:14941-1

SUSE-SU-2022_1307-1

SUSE-SU-2022_14941-1

USN-5408-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Dnsmasq

References · 71

• https://osv.dev/vulnerability/ALPINE-CVE-2022-0934 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:14940-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1289-1 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2057075 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:11998-1 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:8070 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1307-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0934 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-8070.html · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-7633.html · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/684404 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:14941-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0934 · Security Note
• https://osv.dev/vulnerability/ALSA-2022:8070 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:8070 · Vendor Advisory