dnsmasq 2.25 allows remote attackers to cause a denial of service (1) renewing a non-existent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3214)