https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:06:32 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:19158 <p><strong>Affected:</strong> AlmaLinux:10: dnsmasq, AlmaLinux:10: dnsmasq-utils</p> <p>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.</p> <p>Security Fix(es):</p> <p>* dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291) * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890) * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891) * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892) * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893) * dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: dnsmasq, AlmaLinux:10: dnsmasq-utils</p> <p>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.</p> <p>Security Fix(es):</p> <p>* dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291) * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890) * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891) * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892) * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893) * dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:19158 https://cve.radiocsirt.org/vuln/bell-cve-2026-2291 <p><strong>Affected:</strong> Alpaquita:23: dnsmasq, Alpaquita:25: dnsmasq, Alpaquita:stream: dnsmasq</p> <p><strong>Affected:</strong> Alpaquita:23: dnsmasq, Alpaquita:25: dnsmasq, Alpaquita:stream: dnsmasq</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-2291 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0986 certfr-2026-avi-0986 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0986 https://cve.radiocsirt.org/vuln/cleanstart-2026-dr22797 <p><strong>Affected:</strong> CleanStart: dnsmasq</p> <p>Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: dnsmasq</p> <p>Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-dr22797 https://cve.radiocsirt.org/vuln/euvd-2026-339049 EUVD-2026-339049 https://cve.radiocsirt.org/vuln/euvd-2026-339049 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2291 <p>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.</p> <p>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-2291 https://cve.radiocsirt.org/vuln/ghsa-hjxh-hmm9-wcmc <p>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.</p> <p>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.</p> https://cve.radiocsirt.org/vuln/ghsa-hjxh-hmm9-wcmc https://cve.radiocsirt.org/vuln/msrc_cve-2026-2291 msrc_CVE-2026-2291 https://cve.radiocsirt.org/vuln/msrc_cve-2026-2291 https://cve.radiocsirt.org/vuln/oesa-2026-2435 <p><strong>Affected:</strong> openEuler:24.03-LTS: dnsmasq</p> <p>Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks. Security Fix(es):</p> <p>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.(CVE-2026-2291)</p> <p>A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.(CVE-2026-4890)</p> <p>A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.(CVE-2026-4891)</p> <p>A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.(CVE-2026-4892)</p> <p>An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.(CVE-2026-4893)</p> <p>A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read an…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: dnsmasq</p> <p>Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks. Security Fix(es):</p> <p>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.(CVE-2026-2291)</p> <p>A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.(CVE-2026-4890)</p> <p>A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.(CVE-2026-4891)</p> <p>A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.(CVE-2026-4892)</p> <p>An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.(CVE-2026-4893)</p> <p>A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read an…</p> https://cve.radiocsirt.org/vuln/oesa-2026-2435 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10821-1 <p>dnsmasq-2.92rel2-1.1 on GA media</p> <p>dnsmasq-2.92rel2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10821-1 https://cve.radiocsirt.org/vuln/rhsa-2026:54553 <p>icu: Stack buffer overflow in the SRBRoot::addTag function kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources kernel: KVM: x86: Don&#39;t (re)check L1 intercepts when completing userspace I/O dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</p> <p>icu: Stack buffer overflow in the SRBRoot::addTag function kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources kernel: KVM: x86: Don&#39;t (re)check L1 intercepts when completing userspace I/O dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2026:54553 https://cve.radiocsirt.org/vuln/rlsa-2026:19158 <p><strong>Affected:</strong> Rocky Linux:10: dnsmasq</p> <p>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.</p> <p>Security Fix(es):</p> <p>* dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)</p> <p>* dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)</p> <p>* dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)</p> <p>* dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)</p> <p>* dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)</p> <p>* dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: dnsmasq</p> <p>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.</p> <p>Security Fix(es):</p> <p>* dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)</p> <p>* dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)</p> <p>* dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)</p> <p>* dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)</p> <p>* dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)</p> <p>* dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:19158 https://cve.radiocsirt.org/vuln/suse-su-2026:1826-1 <p>Security update for dnsmasq</p> <p>Security update for dnsmasq</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1826-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2291 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: dnsmasq, Ubuntu:Pro:16.04:LTS: dnsmasq, Ubuntu:Pro:18.04:LTS: dnsmasq, Ubuntu:Pro:20.04:LTS: dnsmasq, Ubuntu:22.04:LTS: dnsmasq, Ubuntu:24.04:LTS: dnsmasq, Ubuntu:25.10: dnsmasq, Ubuntu:26.04:LTS: dnsmasq</p> <p>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: dnsmasq, Ubuntu:Pro:16.04:LTS: dnsmasq, Ubuntu:Pro:18.04:LTS: dnsmasq, Ubuntu:Pro:20.04:LTS: dnsmasq, Ubuntu:22.04:LTS: dnsmasq, Ubuntu:24.04:LTS: dnsmasq, Ubuntu:25.10: dnsmasq, Ubuntu:26.04:LTS: dnsmasq</p> <p>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2291 https://cve.radiocsirt.org/vuln/vde-2026-076 <p>The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.</p> <p>The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.</p> https://cve.radiocsirt.org/vuln/vde-2026-076 https://cve.radiocsirt.org/vuln/vde-2026-081 <p>Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.</p> <p>Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.</p> https://cve.radiocsirt.org/vuln/vde-2026-081 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1468 <p>Ein Angreifer kann mehrere Schwachstellen in dnsmasq ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, beliebigen Code mit Root-Rechten auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und Benutzer auf bösartige Domains umzuleiten</p> <p>Ein Angreifer kann mehrere Schwachstellen in dnsmasq ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, beliebigen Code mit Root-Rechten auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und Benutzer auf bösartige Domains umzuleiten</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1468