CVE-2005-0876
published 2005-05-02CVE-2005-0876: Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file.
PriorityP419medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.60%
83.4th percentile
Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | dnsmasq | < dnsmasq 2.21 (bookworm) | dnsmasq 2.21 (bookworm) |
| dnsmasq | dnsmasq | — | — |
| dnsmasq | dnsmasq | — | — |
| dnsmasq | dnsmasq | — | — |
| dnsmasq | dnsmasq | — | — |
| dnsmasq | dnsmasq | — | — |
| dnsmasq | dnsmasq | — | — |
| dnsmasq | dnsmasq | — | — |
| thekelleys | dnsmasq | >= 0 < 2.21 | 2.21 |
| thekelleys | dnsmasq | >= 0 < 2.21 | 2.21 |
| thekelleys | dnsmasq | >= 0 < 2.21 | 2.21 |
| thekelleys | dnsmasq | >= 0 < 2.21 | 2.21 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cjw9-x64q-vcrq: Off-by-one buffer overflow in Dnsmasq before 2
ghsa_unreviewed·2022-05-01
CVE-2005-0876 [MEDIUM] GHSA-cjw9-x64q-vcrq: Off-by-one buffer overflow in Dnsmasq before 2
Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file.
OSV
CVE-2005-0876: Off-by-one buffer overflow in Dnsmasq before 2
osv·2005-05-02·CVSS 5.0
CVE-2005-0876 [MEDIUM] CVE-2005-0876: Off-by-one buffer overflow in Dnsmasq before 2
Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file.
Debian
CVE-2005-0876: dnsmasq - Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute...
vendor_debian·2005·CVSS 5.0
CVE-2005-0876 [MEDIUM] CVE-2005-0876: dnsmasq - Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute...
Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file.
Scope: local
bookworm: resolved (fixed in 2.21)
bullseye: resolved (fixed in 2.21)
forky: resolved (fixed in 2.21)
sid: resolved (fixed in 2.21)
trixie: resolved (fixed in 2.21)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/14691http://www.securityfocus.com/bid/12897http://www.thekelleys.org.uk/dnsmasq/CHANGELOGhttps://exchange.xforce.ibmcloud.com/vulnerabilities/19825http://secunia.com/advisories/14691http://www.securityfocus.com/bid/12897http://www.thekelleys.org.uk/dnsmasq/CHANGELOGhttps://exchange.xforce.ibmcloud.com/vulnerabilities/19825
2005-05-02
Published