dnsmasq: A flaw was found in dnsmasq before version 2.83

A flaw was found in dnsmasq before version 2.83. A heap-based bufferoverflow was discovered in dnsmasq when DNSSEC is enabled and before itvalidates the received DNS entries. A remote attacker, who can create validDNS replies, could use this flaw to cause an overflow in a heap-allocatedmemory. This flaw is caused by the lack of length checks inrfc1035.c:extract_name(), which could be abused to make the code executememcpy() with a negative size in get_rdata() and cause a crash in dnsmasq,resulting in a denial of service. The highest threat from thisvulnerability is to system availability.

Where it's fixed