Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade dnsmasq | Sep 20, 2017 | Jun 30, 2016 |
| Debian | — | Upgrade dnsmasq | Jul 30, 2024 | Jun 30, 2016 |
| Freebsd | — | Upgrade dnsmasq-develUpgrade dnsmasq | Dec 10, 2025 | Jun 30, 2016 |
| Suse | — | Upgrade dnsmasq | Dec 20, 2016 | Jun 30, 2016 |
| Ubuntu | — | Upgrade dnsmasq-utilsUpgrade dnsmasqUpgrade dnsmasq-base | Jun 20, 2016 | Jun 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub