SUSE CVE-2026-12969

An out-of-bounds read vulnerability exists in dnsmasq's findsoa function in src/rfc1035.c. When parsing NS section records, extractname is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can...

CVE-2026-12969

creationtimestamp| type| source ---|---|--- 2026-06-23 15:54:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxr5pmmtj2l...