CVE-2021-45956: Thekelleys Dnsmasq

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge.

Affected products

• Thekelleys Dnsmasq: version 2.86 only

Published 2022-01-01. Last modified 2026-06-17.