CVE-2021-45951: Thekelleys Dnsmasq

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

Affected products

• Thekelleys Dnsmasq: version 2.86 only

Published 2022-01-01. Last modified 2026-06-17.