Simon Kelley 10e6b5b83e Fix buffer overflow in helper.c with large CLIDs. CVE-2026-4892 ...

Bug reported bt Royce M <royce@xchglabs.com>

Location: helper.c:265-270
DHCPv6 CLIDs can be up to 65535 bytes. When --dhcp-script is configured,
the helper hex-encodes raw CLID bytes via sprintf("%.2x") into daemon->packet (5131 bytes).
A 1000-byte CLID writes ~3000 bytes. The helper process retains root privileges.

Note: log6_packet() correctly caps CLID to 100 bytes for logging, but the helper code path was missed.

2026-05-10 21:49:40 +01:00

bld

Remove hash-questions.c - no longer required.

2024-11-02 21:29:47 +00:00

contrib

Omit message type from leasequery.c option dump.

2025-05-14 22:36:03 +01:00

dbus

Allow configuring filter-A/AAAA via dbus.

2023-03-08 15:35:05 +00:00

logo

tweak favicon

2012-04-02 20:40:34 +01:00

man

Accept DHCPv6 vendorclasses with any enterprise number in --dhcp-vendorclass

2026-03-17 13:29:49 +00:00

po

Update German translations.

2025-12-07 13:44:40 +00:00

src

Fix buffer overflow in helper.c with large CLIDs. CVE-2026-4892

2026-05-10 21:49:40 +01:00

submodules

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

.gitattributes

Add .gitattributes to substitute VERSION on export.

2017-05-12 13:14:17 +01:00

.gitignore

Remove debian directory and replace with a git submodule.

2024-02-22 22:45:37 +00:00

.gitmodules

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

Android.mk

import of dnsmasq-2.57.tar.gz

2012-01-05 17:31:15 +00:00

CHANGELOG

Rework storage allocation for domain names. CVE-2026-2291

2026-05-10 21:49:39 +01:00

CHANGELOG.archive

Spelling fixes.

2018-01-14 17:32:52 +00:00

COPYING

Update GNU GPL file.

2022-05-13 21:22:11 +01:00

COPYING-v3

import of dnsmasq-2.41.tar.gz

2012-01-05 17:31:13 +00:00

debian

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

dnsmasq.conf.example

Remove trailing white space from dnsmasq.conf.example

2025-12-05 15:12:28 +00:00

doc.html

Added a tail to .hmtl files

2025-07-20 15:29:43 +01:00

FAQ

Typo in FAQ.

2021-06-15 23:14:59 +01:00

Makefile

Bump copyrights to 2026.

2026-04-08 12:08:18 +01:00

setup.html

Added a tail to .hmtl files

2025-07-20 15:29:43 +01:00

trust-anchors.conf

Add IANA Root TA 2024.

2024-12-18 23:58:58 +00:00

VERSION

VERSION file

2012-01-05 22:00:08 +00:00

S

Description

No description provided

GPL-2.0

6.2 MiB

0 Stars 1 Watchers 0 Forks

Languages

C 94.3%

Perl 2.2%

HTML 1.2%

Shell 1%

Makefile 0.6%

Other 0.6%