The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dnsmasq | Sep 21, 2026 | Jun 22, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 21, 2026 |
| Ubuntu | — | Upgrade dnsmasq-base (Ubuntu Pro)Upgrade dnsmasq-utilsUpgrade dnsmasq-base-lua (Ubuntu Pro)Upgrade dnsmasq (Ubuntu Pro)Upgrade dnsmasq-baseUpgrade dnsmasqUpgrade dnsmasq-utils (Ubuntu Pro)Upgrade dnsmasq-base-lua | Jul 15, 2026 | Jul 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub