Lucene search
+L

7 matches found

OSV
OSV
•added 2026/09/04 12:59 a.m.•8 views

CLEANSTART-2026-KY78316 dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-...

Multiple security vulnerabilities affect the dnsmasq package. dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS...

9.8CVSS7.2AI score0.99988EPSS
SaveExploits40References55
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•14 views

EulerOS Virtualization 2.13.0 : dnsmasq (EulerOS-SA-2026-3210)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via...

8.8CVSS8.4AI score0.01068EPSS
SaveExploits3References6
attackerkb
attackerkb
•added 2026/05/11 4:47 p.m.•15 views

CVE-2026-2291

dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS...

7.3CVSS5.9AI score0.00611EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2026/05/11 4:47 p.m.•96 views

CVE-2026-2291 CVE-2026-2291

dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS...

0.00611EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/11 12:00 a.m.•0 views

CVE-2026-2291: Undefined Security Weakness

dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS...

7.3CVSS6AI score0.00611EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/12/04 12:00 a.m.•16 views

TencentOS Server 2: bind (TSSA-2025:0926)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0926 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

8.6CVSS6.6AI score0.00667EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/11/22 12:00 a.m.•9 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: bind (UTSA-2025-990939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990939 advisory. Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects...

8.6CVSS6.5AI score0.00667EPSS
SaveExploits1References4
Rows per page
Query Builder