CVE-2021-45952: Thekelleys Dnsmasq

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

Affected products

• Thekelleys Dnsmasq: version 2.86 only

Published 2022-01-01. Last modified 2026-06-17.