Dolitli

**Name of the Vulnerable Software and Affected Versions** dnsmasq (affected versions not specified) **Description** An out-of-bounds read occurs in the `find soa()` function within src/rfc1035.c. During the parsing of NS section records, the `extract name()` function is called with `extrabytes=0`, which fails to verify the existence of 10 additional bytes required for fixed-length DNS record fields. A remote attacker who controls a DNS zone can trigger a 10-byte heap out-of-bounds read by sending a crafted NXDOMAIN response, potentially allowing access to stale data from previous transactions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.