Priority LOW 30
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00256 · Published 2026-06-23 · Fix deferred CWE-125
Priority LOW 27
A heap-based buffer overflow was found in dnsmasq.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00528 · Published 2026-06-22 · Fix deferred CWE-122
Priority LOW 34
dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00656 · Published 2024-06-06 · No fix listed CWE-190
Priority HIGH 84
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.9999 · Published 2024-02-14 · Fixed CWE-770
Priority MEDIUM 43
An issue was discovered in Dnsmasq before 2.90.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01838 · Published 2023-03-15 · Partial fix
Priority MEDIUM 44
A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02644 · Published 2022-08-29 · Partial fix CWE-416
Priority MEDIUM 47
Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02709 · Published 2021-12-31 · No fix listed CWE-787
Priority MEDIUM 47
Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02709 · Published 2021-12-31 · No fix listed CWE-787
Priority MEDIUM 47
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02709 · Published 2021-12-31 · No fix listed CWE-787
Priority HIGH 82
Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header re-insertion.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02602 · Published 2021-12-31 · No fix listed CWE-787
Priority MEDIUM 54
Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02709 · Published 2021-12-31 · No fix listed CWE-787
Priority MEDIUM 47
Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0256 · Published 2021-12-31 · No fix listed CWE-787
Priority MEDIUM 47
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02709 · Published 2021-12-31 · No fix listed CWE-787
Priority LOW 23
A flaw was found in dnsmasq in versions before 2.85.
CVSS 3.1MEDIUM 4.0· Network · No auth · No interaction · EPSS 0.02283 · Published 2021-04-08 · Partial fix CWE-358
Priority LOW 26
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.05466 · Published 2021-01-20 · Partial fix CWE-358
Priority HIGH 76
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.84085 · Published 2021-01-20 · Fixed CWE-122
Priority HIGH 69
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.89282 · Published 2021-01-20 · Fixed CWE-122
Priority HIGH 74
A flaw was found in dnsmasq before 2.83.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.75066 · Published 2021-01-20 · Fixed CWE-122
Priority HIGH 69
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.88775 · Published 2021-01-20 · Fixed CWE-122
Priority LOW 25
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.0416 · Published 2021-01-20 · Partial fix CWE-358
Priority LOW 22
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.02227 · Published 2021-01-20 · Partial fix CWE-326
Priority LOW 23
A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.02652 · Published 2020-01-07 · Partial fix · 2.81 CWE-770
Priority LOW 36
Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability tha…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01705 · Published 2019-08-01 · Fixed CWE-125
Priority LOW 38
A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02646 · Published 2018-01-23 · No fix listed CWE-358
Priority HIGH 70
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS req…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.68418 · Published 2017-10-02 · Fixed CWE-191
Load more
THREATIST.IORead the docs