Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in dnsmasq ausnutzen, um Daten zu manipulieren oder auszulesen oder einen Denial-of-Service-Angriff durchzuführen.
Product
Dnsmasq ist ein leichtgewichtiger DNS- und DHCP Server.
Vulnerabilities 6
-
Medium 6.8
Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive…
-
Medium 6.8
Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations
A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains t…
-
Medium 5.3
Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation
A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive timeout on client connections. A remote attacker can open idle TCP connections to port 53 and occupy the entire pool, preventing new TCP DNS…
-
Medium 5.3
Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms
A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes past a name buffer when converting names to and from DNS wire format. An attacker who can cause the server to validate a crafted DN…
-
Medium 4.3
Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder
A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option because it checks the next label length before confirming the pointer is still inside the option. An attacker on the local network can trigg…
-
Medium 4.3
Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check
A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostna…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Security Advisory vom 2026-10-29
https://github.com/advisories/GHSA-WPPH-R7R5-526C
-
GitHub Security Advisory vom 2026-10-29
https://github.com/advisories/GHSA-2JQ5-WC7Q-J2FC
-
GitHub Security Advisory vom 2026-10-29
https://github.com/advisories/GHSA-2FRF-FR59-FCJQ
-
GitHub Security Advisory vom 2026-10-29
https://github.com/advisories/GHSA-FP59-6RFJ-9JGW
-
GitHub Security Advisory vom 2026-10-29
https://github.com/advisories/GHSA-2R7H-M3QH-F4CJ
-
GitHub Security Advisory vom 2026-10-29
https://github.com/advisories/GHSA-6QRC-RPQW-59WP