Skip to content
OpenAdvisories
Medium USN-8311-1 1 CVE

dnsmasq vulnerability

Published May 26, 2026 · Updated May 27, 2026

Ecosystem: Ubuntu

Summary

Petr Menšík discovered that Dnsmasq incorrectly handled certain
input in the dhcp_release utility. A local attacker could possibly
use this issue to cause Dnsmasq to crash, resulting in a denial of
service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS dnsmasq 2.68-1ubuntu0.2+esm6

Vulnerabilities 1

  • Medium 5.5
    CVE-2020-37127

    dnsmasq-utils 2.79-1 - 'dhcp_release' Denial of Service

    Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcp_release utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcp_release process by sending a cr…

    dnsmasq dnsmasq-utils dnsmasq dnsmasq Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-37127