Dnsmasq-Utils Buffer Overflow Vulnerability in DHCP Release Utility Allowing Denial-of-Service

A buffer overflow vulnerability has been identified in the dnsmasq-utils package version 2.79-1, specifically within the dhcp_release utility. This vulnerability allows attackers to cause a denial-of-service condition by sending excessively long input strings, exceeding 16 characters. The exploitation of this vulnerability leads to a core dump and terminates the dhcp_release process.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by terminating the dhcp_release process and generating a core dump.

Reproduction

The vulnerability can be reproduced by using the dhcp_release utility and supplying a crafted input string longer than 16 characters. This can be automated with a Python script that increments the string length until the buffer overflow is detected, indicated by the process being terminated and a core dump being generated.