{"id":"OSV-2022-312","summary":"Heap-buffer-overflow in dhcp_reply","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46416\n\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndhcp_reply\ndhcp_packet\nFuzzDhcp\n","modified":"2026-09-20T14:17:57.115080Z","published":"2022-04-07T00:00:40.457052Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46416"}],"affected":[{"package":{"name":"dnsmasq","ecosystem":"OSS-Fuzz","purl":"pkg:generic/dnsmasq"},"ranges":[{"type":"GIT","repo":"git://thekelleys.org.uk/dnsmasq.git","events":[{"introduced":"03345ecefeb0d82e3c3a4c28f27c3554f0611b39"}]}],"versions":["v2.87test9","v2.87rc1","v2.87","v2.88test1","v2.88test2","v2.88test3","v2.88rc1","v2.88rc2","v2.88rc3","v2.88rc4","v2.88rc5","v2.88","v2.89test1","v2.89","v2.90test1","v2.90test2","v2.90test3","v2.90test4","v2.90","v2.90deb2","v2.91test1","v2.91test2","v2.91test4","v2.91test5","v2.91test6","v2.91test7","v2.91test8","v2.91test9","v2.91test10","v2.91rc1","v2.91rc2","v2.91rc3","v2.91rc4","v2.91rc5","v2.91rc6","v2.91","v2.92test1","v2.92test2","v2.92test3","v2.92test4","v2.92test5","v2.92test6","v2.92test7","v2.92test8","v2.92test9","v2.92test10","v2.92test11","v2.92test12","v2.92test13","v2.92test14","v2.92test15","v2.92test16","v2.92test17","v2.92test18","v2.92test19","v2.92test20","v2.92test21","v2.92test22","v2.92rc1","v2.92rc2","v2.92rc3","v2.92","v2.93test1","v2.93test2","v2.93test3","v2.93test4","v2.93test5","v2.93test6","v2.93test7","v2.93test8","v2.93test9","v2.93test10","v2.93rc1","v2.93rc2","v2.93rc3","v2.93"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2022-312.yaml"}}],"schema_version":"1.9.0"}