Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root
Six dnsmasq flaws enable DNS cache poisoning, DoS, memory leaks, and local root code execution; fixes ship in version 2.92rel2.
Researchers disclosed six dnsmasq vulnerabilities spanning memory safety and input validation, including heap buffer overflows in extract_name() and extract_addresses(), DNSSEC infinite-loop and out-of-bounds read flaws, and a DHCPv6 out-of-bounds write allowing local root code execution. Exploitation paths include DNS cache poisoning, bypassing security controls, remote denial of service, and local privilege escalation. Maintainers released version 2.92rel2 with fixes, and a stable 2.93 release is expected within weeks.
68