dnsmasq Heap-Based Out-of-Bounds Read Vulnerability in DNSSEC Validation Allowing Denial-of-Service

A heap-based out-of-bounds read vulnerability has been identified in dnsmasq's DNSSEC validation. This vulnerability allows remote attackers to leak memory information by sending a crafted DNS packet, potentially leading to a denial-of-service condition by causing the dnsmasq process to crash or become unresponsive.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, where dnsmasq crashes or becomes unresponsive, disrupting DNS resolution and affecting services that rely on it.

Remediation

dnsmasq has released a patch in version 2.92rel2 to address this vulnerability. Users should upgrade to this version.