Skip to content
OpenAdvisories
Unscored DSA-1876-1 2 CVEs

dnsmasq - remote code execution

Published Sep 1, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 dnsmasq 2.45-1+lenny1

Vulnerabilities 2

  • Unscored —
    CVE-2009-2957 Public exploit EPSS 15%

    Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, m…

    dnsmasq Debian
  • Unscored —
    CVE-2009-2958 Public exploit EPSS 10%

    The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to caus…

    dnsmasq Debian