dnsmasq

15 results · Clear filters · Feed

• High 7.3
  CVE-2026-5172 Public exploit

  CVE-2026-5172

  A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

  dnsmasq dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  May 11, 2026
• Medium 5.3
  CVE-2026-4893 Public exploit

  CVE-2026-4893

  An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.

  dnsmasq dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  May 11, 2026
• High 7.3
  CVE-2026-2291 Public exploit

  CVE-2026-2291

  dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

  dnsmasq dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  May 11, 2026
• High 7.5
  CVE-2023-50868 Public exploit EPSS 74%

  The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote att…

  bind9 bind9 bind unbound Debian Ubuntu Alpine
  Feb 14, 2024
• High 7.5
  CVE-2023-50387 Public exploit EPSS 100%

  Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to …

  bind9 bind9 bind unbound Debian Ubuntu Alpine
  Feb 14, 2024
• Unscored —
  CVE-2020-25686 Public exploit

  A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2017-14495 Public exploit EPSS 85%

  Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Oct 2, 2017
• Unscored —
  CVE-2017-14492 Public exploit EPSS 94%

  Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Oct 2, 2017
• Unscored —
  CVE-2017-14494 Public exploit EPSS 70%

  dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vec…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Oct 2, 2017
• Unscored —
  CVE-2017-14493 Public exploit EPSS 85%

  Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or exec…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Oct 2, 2017
• Unscored —
  CVE-2017-14491 Public exploit EPSS 86%

  Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Oct 2, 2017
• Unscored —
  CVE-2017-14496 Public exploit EPSS 68%

  Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-s…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Oct 2, 2017
• Unscored —
  CVE-2009-2958 Public exploit EPSS 10%

  The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to caus…

  dnsmasq Debian
  Sep 2, 2009
• Unscored —
  CVE-2009-2957 Public exploit EPSS 15%

  Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, m…

  dnsmasq Debian
  Sep 2, 2009
• Unscored —
  CVE-2008-1447 Public exploit EPSS 95%

  The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Wind…

  bind9 dnsmasq adns libnet-dns-perl Debian
  Jul 8, 2008