CVE-2022-0934: redhat enterprise_linux Use After Free
CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2022-0934MGASA-2022-0233SUSE-SU-2022:1307-1RHSA-2022:7633RHSA-2022:8070UBUNTU-CVE-2022-0934USN-5408-1DEBIAN-CVE-2022-0934openSUSE-SU-2024:11998-1
Published 29-08-2022Last modified 03-11-2025
Vulnerability summary
CVE-2022-0934 is a high (CVSS 7.5) Use After Free vulnerability in redhat enterprise_linux. EPSS estimates a 2.48% chance of exploitation in the next 30 days, higher than 84.3% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
2.48%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 6 · Related 4Timeline
- 29-08-2022PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.
CVSS metrics
6 scores · 6 sources · 1 versionHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesAll 6 agree
- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.48%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
0.00 pp
From 2.48% on 19-09-2026
19-09-202619-10-2026
EPSS score2.48%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse20 products
- dnsmasq&distro=SUSE Enterprise Storage 6< 2.86-150100.7.20.1
- dnsmasq&distro=SUSE Enterprise Storage 7< 2.86-150100.7.20.1
- dnsmasq&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 2.86-150100.7.20.1
- dnsmasq&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 2.86-150100.7.20.1
- dnsmasq&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS< 2.86-150100.7.20.1
Redhat6 products
- enterprise_linux8.0 | 9.0
- dnsmasq< 0:2.79-24.el8 | < 0:2.85-5.el9
- dnsmasq-debuginfo< 0:2.79-24.el8 | < 0:2.85-5.el9
- dnsmasq-debugsource< 0:2.79-24.el8 | < 0:2.85-5.el9
- dnsmasq-utils< 0:2.79-24.el8 | < 0:2.85-5.el9
Opensuse2 products
- dnsmasq&distro=openSUSE Leap 15.3< 2.86-150100.7.20.1
- dnsmasq&distro=openSUSE Tumbleweed< 2.86-4.1
Alpine1 product
- dnsmasq< 2.86-r1
Debian1 product
- dnsmasq< 2.87-1
Mageia1 product
- dnsmasq< 2.85-4.mga8
Thekelleys1 product
- dnsmasq< 2.87
Ubuntu1 product
- dnsmasq< 2.68-1ubuntu0.2+esm1 | < 2.75-1ubuntu0.16.04.10+esm1 | < 2.79-1ubuntu0.6 | < 2.80-1.1ubuntu1.5 | < 2.86-1.1ubuntu0.1
8 vendors · 33 products
References
26 links- bugzilla.redhat.com/show_bug.cgi?id=2057075X Refsource MISCREPORTIssue TrackingPatchThird Party Advisory
- lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016272.htmlX Refsource MISCWEBARTICLEREPORTMailing ListVendor Advisory
- thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=03345ecefeb0d82e3c3a4c28f27c3554f0611b39X Refsource MISCBroken Link
