Updated dnsmasq packages fix security vulnerabilities

CVE-2026-2291: dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. CVE-2026-4890: A Denial of Service DoS...

AZL-86772 CVE-2026-4890 affecting package dnsmasq for versions less than 2.92-1

A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet...

CVE-2026-4891

The dnsmasq service is vulnerable to a heap-based out-of-bounds read within its DNSSEC validation logic. This flaw is triggered by an RRSIG rdlen underflow , which allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted DNS packet. Affected versions include thos...

CVE-2026-4890

The dnsmasq service is vulnerable to a Denial of Service (DoS) attack via a crafted DNS packet during DNSSEC validation . The root cause lies in the prove_non_existence_nsec() and NSEC3 loops within src/dnssec.c, where the code fails to account for the header size when decrementing the record len...

CVE-2026-4893

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information...

dnsmasq -- multiple vulnerabilities

Simon Kelley reports: Today, 11th May 2026 CERT is releasing a set of six CVEs for serious security vulnerabilities in dnsmasq. These are all long-standing bugs which apply to pretty much all non-ancient versions. Christopher Cullen and Molly Jaconski write, in Vulnerability Note VU471747:...

EUVD-2012-2956

Malware in sbrugna...

EUVD-2017-3673

Malware in sbrugna...

[ASA-201901-15] haproxy: denial of service

Arch Linux Security Advisory ASA-201901-15 ========================================== Severity: Medium Date : 2019-01-24 CVE-ID : CVE-2018-20102 CVE-2018-20103 Package : haproxy Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-836 Summary ======= The package haproxy...

CVE-2017-12087

An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted packet can make the library overwrite an arbitrary amount of data on the heap with attacker controlled values. An attacker needs send a dns packet to trigger this vulnerability...

Fedora 25 : systemd (2017-29d909f5ec)

A fix for an out-of-bounds write in systemd-resolved after a crafted DNS packet CVE-2017-9445. No need to reboot or log out. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clea...

Fedora 25 : systemd (2017-8ff992386d)

A security fix for a systemd-resolved crash on a crafted DNS packet. Relevant only to systemd-resolved users not enabled by default. No need to reboot or logout. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenabl...

CVE-2012-2978

query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and child process crash via a crafted DNS packet...

Design/Logic Flaw

MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name CNAME record from resolving, aka "improper rotation of resource records."...

CVE-2008-0061: Undefined Security Weakness

MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name CNAME record from resolving, aka "improper rotation of resource records."...