https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:09:06.905746+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7633 ALSA-2022:7633 — Moderate: dnsmasq security and bug fix update 2026-10-03T08:09:07.207549+00:00

Affected: AlmaLinux:8: dnsmasq, AlmaLinux:8: dnsmasq-utils

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-03253 bdu:2022-03253 2026-10-03T08:09:07.207620+00:00 bdu:2022-03253 https://cve.radiocsirt.org/vuln/bell-cve-2022-0934 Withdrawn: BELL-CVE-2022-0934 — CVE-2022-0934 does not affect BellSoft software 2026-10-03T08:09:07.207639+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0051 certfr-2023-avi-0051 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta… 2026-10-03T08:09:07.207655+00:00 certfr-2023-avi-0051 https://cve.radiocsirt.org/vuln/cleanstart-2026-ky78316 Withdrawn: CLEANSTART-2026-KY78316 — dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DN… 2026-10-03T08:09:07.207670+00:00

Withdrawn by the publisher.

Affected: CleanStart: dnsmasq

Multiple security vulnerabilities affect the dnsmasq package. dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-258326 EUVD-2026-258326 2026-10-03T08:09:07.207694+00:00 EUVD-2026-258326 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0934 fkie_cve-2022-0934 2026-10-03T08:09:07.207705+00:00

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-wpmh-x6rm-9p34 GHSA-wpmh-x6rm-9p34 2026-10-03T08:09:07.207726+00:00

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2022-0934 gsd-2022-0934 2026-10-03T08:09:07.207740+00:00 gsd-2022-0934 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0934 msrc_CVE-2022-0934 — A single-byte non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a cr… 2026-10-03T08:09:07.207750+00:00 msrc_CVE-2022-0934 https://cve.radiocsirt.org/vuln/oesa-2022-1761 OESA-2022-1761 — dnsmasq security update 2026-10-03T08:09:07.207787+00:00

Affected: openEuler:20.03-LTS-SP1: dnsmasq, openEuler:20.03-LTS-SP3: dnsmasq, openEuler:22.03-LTS: dnsmasq

Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks. Security Fix(es): No description is available for this CVE.(CVE-2022-0934)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11998-1 openSUSE-SU-2024:11998-1 — dnsmasq-2.86-4.1 on GA media 2026-10-03T08:09:07.207820+00:00

dnsmasq-2.86-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:1545 RHSA-2024:1545 — Red Hat Security Advisory: dnsmasq security update 2026-10-03T08:09:07.207836+00:00

dnsmasq: Heap use after free in dhcp6_no_relay dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

 https://cve.radiocsirt.org/vuln/suse-su-2022:1288-1 SUSE-SU-2022:1288-1 — Security update for dnsmasq 2026-10-03T08:09:07.207864+00:00

Security update for dnsmasq

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0934 UBUNTU-CVE-2022-0934 2026-10-03T08:09:07.207891+00:00

Affected: Ubuntu:Pro:14.04:LTS: dnsmasq, Ubuntu:Pro:16.04:LTS: dnsmasq, Ubuntu:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq, Ubuntu:22.04:LTS: dnsmasq

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1988 WID-SEC-W-2022-1988 — dnsmasq: Schwachstelle ermöglicht nicht spezifizierten Angriff 2026-10-03T08:09:07.207944+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dnsmasq ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.