Dnsmasq
9 CVEs across 2 Dnsmasq products. Browse Dnsmasq vulnerabilities, severities, and proof-of-concept exploits.
Dnsmasq products with known CVEs
Dnsmasq CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-5172 | High | 7.3 | 2026-05-11 | A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS res… |
CVE-2026-4893 | Medium | 5.3 | 2026-05-11 | An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet informa… |
CVE-2026-4892 | High | 8.4 | 2026-05-11 | A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges vi… |
CVE-2026-4891 | Medium | 5.3 | 2026-05-11 | A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. |
CVE-2026-4890 | High | 7.5 | 2026-05-11 | A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. |
CVE-2026-2291 | High | 7.3 | 2026-05-11 | dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in D… |
CVE-2020-37127 | Medium | 5.5 | 2026-02-05 | Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcp_release utility that allows attackers to cause a denial of service by supplying exces… |
CVE-2006-2017 | | | 2006-04-25 | Dnsmasq 2.29 allows remote attackers to cause a denial of service (application crash) via a DHCP client broadcast reply request. |
CVE-2005-0876 | | | 2005-05-02 | Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file. |