Skip to content
OpenAdvisories

Vendor

dnsmasq

7 known vulnerabilities.

Products

dnsmasq 6 dnsmasq-utils 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-5172 Public exploit

    CVE-2026-5172

    A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

    dnsmasq dnsmasq dnsmasq dnsmasq Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.3
    CVE-2026-2291 Public exploit

    CVE-2026-2291

    dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

    dnsmasq dnsmasq dnsmasq dnsmasq Debian Ubuntu Azure Linux Alpine Wolfi