An out-of-bounds write vulnerability in the dnsmasq DHCP relay function poses a significant denial of service risk to network infrastructure.

This flaw involves an out-of-bounds write vulnerability triggered when the dnsmasq daemon is configured with the --dhcp-split-relay option. An unauthenticated remote attacker can send a specially crafted BOOTREPLY packet to the server, leading to memory corruption and a daemon crash.

The ability for an unauthenticated attacker to remotely crash the dnsmasq service directly impacts network availability and connectivity for dependent clients. Given the CVSS score of 7.5, this high-severity vulnerability could lead to significant operational disruption in environments relying on dnsmasq for critical DHCP or DNS services.

Immediate Action: Update the dnsmasq package to version 2.93 or later immediately to incorporate the vendor-provided memory safety fixes.

Proactive Monitoring: Monitor system logs for unexpected crashes of the dnsmasq process and investigate any malformed DHCP traffic or unusual BOOTREPLY packets detected on the network.

Compensating Controls: If immediate patching is not feasible, disable the --dhcp-split-relay configuration option if it is not strictly required for network operations.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to network availability. Administrators should prioritize the update to version 2.93 across all affected Linux distributions, particularly those utilizing the --dhcp-split-relay configuration. Immediate remediation is necessary to prevent potential service denial incidents caused by remote exploitation.