| Title | dnsmasq v2.73rc6 NULL Pointer Dereference |
|---|
| Description | dnsmasq v2.73rc6 contains a null pointer write in parse_dhcp_opt() when handling OPTION_SIP_SERVER. If the configuration provides an empty or otherwise invalid text value such that the builder buffer m is never allocated, the code still executes m[0] = 0, writing to NULL and crashing during startup. Reproduce by replacing dnsmasq.conf with the provided file and launching ./dnsmasq (AFLNet seed result4/id:19 also triggers the same path). |
|---|
| Source | ⚠️ https://shimo.im/docs/5xkGoMo0WVfY4dkX/ |
|---|
| User | zh_vul (UID 91488) |
|---|
| Submission | 10/11/2025 05:48 (8 months ago) |
|---|
| Moderation | 10/25/2025 08:22 (14 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 329870 [dnsmasq up to 2.73rc6 Config File src/option.c parse_dhcp_opt m null pointer dereference] |
|---|
| Points | 20 |
|---|