Threats tagged 'ghsa-6qrc-rpqw-59wp'

A vulnerability in dnsmasq's DHCPv6 client hostname parser allows reading one byte past the end of a crafted FQDN option. This out-of-bounds read occurs because the parser checks the next label length without confirming the pointer remains inside the option. The flaw can be triggered by an attacker on the local network with a single DHCPv6 packet. No crash or data leak has been demonstrated, and the extra byte is not returned or logged.