{"id":"OSV-2022-572","summary":"Heap-buffer-overflow in dhcp_reply","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndhcp_reply\ndhcp_packet\nFuzzDhcp\n```\n","modified":"2025-07-01T14:24:05.029738Z","published":"2022-07-12T00:00:45.818288Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002"}],"affected":[{"package":{"name":"dnsmasq","ecosystem":"OSS-Fuzz","purl":"pkg:generic/dnsmasq"},"ranges":[{"type":"GIT","repo":"git://thekelleys.org.uk/dnsmasq.git","events":[{"introduced":"20b4a4ea5b19f3143add1342dde74a0be2b30a86"},{"introduced":"151d7dc5eaabb38a2a7cb2ace72fe8860f4415ae"},{"fixed":"ec8f3e65c19e8dee114e31759d447926d3ebd7cf"}]}],"versions":["v2.87","v2.87rc1","v2.87test9","v2.88","v2.88rc1","v2.88rc2","v2.88rc3","v2.88rc4","v2.88rc5","v2.88test1","v2.88test2","v2.88test3","v2.89","v2.89test1","v2.90","v2.90deb2","v2.90test1","v2.90test2","v2.90test3","v2.90test4","v2.91","v2.91rc1","v2.91rc2","v2.91rc3","v2.91rc4","v2.91rc5","v2.91rc6","v2.91test1","v2.91test10","v2.91test2","v2.91test4","v2.91test5","v2.91test6","v2.91test7","v2.91test8","v2.91test9","v2.92test1","v2.92test10","v2.92test11","v2.92test12","v2.92test13","v2.92test2","v2.92test3","v2.92test4","v2.92test5","v2.92test6","v2.92test7","v2.92test8","v2.92test9"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2022-572.yaml","fixed_range":"09d741f58a50f7e9ec2d6e0634f8ab5b11a7de5f:ec8f3e65c19e8dee114e31759d447926d3ebd7cf"}}],"schema_version":"1.7.3"}