https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:12:09.958440+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4153 ALSA-2021:4153 — Moderate: dnsmasq security and bug fix update 2026-10-04T06:12:09.973320+00:00

Affected: AlmaLinux:8: dnsmasq, AlmaLinux:8: dnsmasq-utils

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: fixed outgoing port used when --server is used with an interface name (CVE-2021-3448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-04028 bdu:2022-04028 2026-10-04T06:12:09.973390+00:00 bdu:2022-04028 https://cve.radiocsirt.org/vuln/bell-cve-2021-3448 Withdrawn: BELL-CVE-2021-3448 — CVE-2021-3448 does not affect BellSoft software 2026-10-04T06:12:09.973408+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cleanstart-2026-eo77574 CLEANSTART-2026-EO77574 — Security fix for CVE-2021-3448 applied in: dnsmasq 2.85-r0 2026-10-04T06:12:09.973435+00:00

Affected: CleanStart: dnsmasq

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-262382 EUVD-2026-262382 2026-10-04T06:12:09.973457+00:00 EUVD-2026-262382 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3448 fkie_cve-2021-3448 2026-10-04T06:12:09.973470+00:00

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

 https://cve.radiocsirt.org/vuln/ghsa-vvf4-c8p4-89v5 GHSA-vvf4-c8p4-89v5 2026-10-04T06:12:09.973492+00:00

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

 https://cve.radiocsirt.org/vuln/gsd-2021-3448 gsd-2021-3448 2026-10-04T06:12:09.973508+00:00 gsd-2021-3448 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3448 msrc_CVE-2021-3448 — A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network inter… 2026-10-04T06:12:09.973519+00:00 msrc_CVE-2021-3448 https://cve.radiocsirt.org/vuln/oesa-2021-1189 OESA-2021-1189 — dnsmasq security update 2026-10-04T06:12:09.973538+00:00

Affected: openEuler:20.03-LTS-SP1: dnsmasq

Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks. Security Fix(es): A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.(CVE-2021-3448)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1426-1 openSUSE-SU-2021:1426-1 — Security update for dnsmasq 2026-10-04T06:12:09.973562+00:00

Security update for dnsmasq

 https://cve.radiocsirt.org/vuln/suse-su-2021:3530-1 SUSE-SU-2021:3530-1 — Security update for dnsmasq 2026-10-04T06:12:09.973579+00:00

Security update for dnsmasq

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3448 UBUNTU-CVE-2021-3448 2026-10-04T06:12:09.973595+00:00

Affected: Ubuntu:Pro:14.04:LTS: dnsmasq, Ubuntu:Pro:16.04:LTS: dnsmasq, Ubuntu:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1335 WID-SEC-W-2022-1335 — Xerox FreeFlow Print Server: Mehrere Schwachstellen 2026-10-04T06:12:09.973619+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.