CVE-2021-45954: Thekelleys Dnsmasq

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

Affected products

• Thekelleys Dnsmasq: version 2.86 only

Published 2022-01-01. Last modified 2026-06-17.