<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 08:05:41 +0000</lastBuildDate>
    <item>
      <title>certfr-2024-avi-0968 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2024-avi-0968</link>
      <description>certfr-2024-avi-0968</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2024-avi-0968</guid>
    </item>
    <item>
      <title>EUVD-2026-222764</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-222764</link>
      <description>EUVD-2026-222764</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-222764</guid>
    </item>
    <item>
      <title>fkie_cve-2023-49441</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2023-49441</link>
      <description>&lt;p&gt;dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2023-49441</guid>
    </item>
    <item>
      <title>GHSA-wh73-785p-7wcf</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-wh73-785p-7wcf</link>
      <description>&lt;p&gt;dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-wh73-785p-7wcf</guid>
    </item>
    <item>
      <title>gsd-2023-49441</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2023-49441</link>
      <description>gsd-2023-49441</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2023-49441</guid>
    </item>
    <item>
      <title>ICSA-24-319-06 — Siemens SCALANCE M-800 Family</title>
      <link>https://cve.radiocsirt.org/vuln/icsa-24-319-06</link>
      <description>&lt;p&gt;An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability. An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions&#13;
Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation. This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients. The F…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability. An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions&#13;
Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation. This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients. The F…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/icsa-24-319-06</guid>
    </item>
    <item>
      <title>OESA-2024-1903 — dnsmasq security update</title>
      <link>https://cve.radiocsirt.org/vuln/oesa-2024-1903</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:22.03-LTS-SP3: dnsmasq&lt;/p&gt;
&lt;p&gt;Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks.&#13;
&#13;
Security Fix(es):&#13;
&#13;
dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.(CVE-2023-49441)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:22.03-LTS-SP3: dnsmasq&lt;/p&gt;
&lt;p&gt;Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks.&#13;
&#13;
Security Fix(es):&#13;
&#13;
dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.(CVE-2023-49441)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/oesa-2024-1903</guid>
    </item>
    <item>
      <title>openSUSE-SU-2024:14031-1 — dnsmasq-2.90-2.1 on GA media</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2024:14031-1</link>
      <description>&lt;p&gt;dnsmasq-2.90-2.1 on GA media&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;dnsmasq-2.90-2.1 on GA media&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2024:14031-1</guid>
    </item>
    <item>
      <title>SUSE-SU-2026:21626-1 — Security update for dnsmasq</title>
      <link>https://cve.radiocsirt.org/vuln/suse-su-2026:21626-1</link>
      <description>&lt;p&gt;Security update for dnsmasq&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for dnsmasq&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/suse-su-2026:21626-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2023-49441</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49441</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: dnsmasq, Ubuntu:Pro:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq, Ubuntu:22.04:LTS: dnsmasq&lt;/p&gt;
&lt;p&gt;dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: dnsmasq, Ubuntu:Pro:18.04:LTS: dnsmasq, Ubuntu:20.04:LTS: dnsmasq, Ubuntu:22.04:LTS: dnsmasq&lt;/p&gt;
&lt;p&gt;dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49441</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-1317 — dnsmasq: Schwachstelle ermöglicht Denial of Service</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1317</link>
      <description>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dnsmasq ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in dnsmasq ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1317</guid>
    </item>
  </channel>
</rss>
