dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dnsmasqUpgrade dnsmasq-utils | May 27, 2026 | May 19, 2026 |
| Alpine Linux | — | Upgrade dnsmasq | May 15, 2026 | May 11, 2026 |
| Amazon Linux Ami 2 | — | Upgrade dnsmasq-debuginfoUpgrade dnsmasq-utilsUpgrade dnsmasq | Jun 16, 2026 | Jun 16, 2026 |
| Amazon_linux_2023 | — | Upgrade dnsmasq-debugsourceUpgrade dnsmasqUpgrade dnsmasq-utils-debuginfoUpgrade dnsmasq-utilsUpgrade dnsmasq-debuginfo | Jun 15, 2026 | May 11, 2026 |
| Debian | — | Upgrade dnsmasq | May 12, 2026 | May 12, 2026 |
| Freebsd | — | Upgrade dnsmasqUpgrade dnsmasq-devel | May 13, 2026 | May 11, 2026 |
| Gentoo Linux | — | Upgrade net-dns/dnsmasq. | Aug 16, 2026 | Aug 13, 2026 |
| Oracle_linux | — | Upgrade dnsmasqUpgrade dnsmasq-utils | May 28, 2026 | May 11, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 20, 2026 | May 9, 2026 |
| Redhat_linux | — | Upgrade dnsmasq-utils-debuginfoNo solution existsUpgrade dnsmasq-debugsourceUpgrade dnsmasq-utilsUpgrade dnsmasqUpgrade dnsmasq-debuginfo | May 20, 2026 | May 9, 2026 |
| Rocky_linux | — | Upgrade dnsmasq-debugsourceUpgrade dnsmasq-debuginfoUpgrade dnsmasq-utilsUpgrade dnsmasq-utils-debuginfoUpgrade dnsmasq | Jun 1, 2026 | May 29, 2026 |
| Suse | — | Upgrade dnsmasqUpgrade dnsmasq-utils | May 13, 2026 | May 13, 2026 |
| Ubuntu | — | Upgrade dnsmasqUpgrade dnsmasq (Ubuntu Pro) | May 25, 2026 | May 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 29, 2026 | May 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub