Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Dnsmasq vulnerabilities (USN-8542-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8542-1 advisory. Yiwei Hou discovered that Dnsmasq incorrectly handled logging of DS or DNSKEY. A remote...

TencentOS Server 4: dnsmasq (TSSA-2026:0344)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0344 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2026-4891 vulnerabilities

Vulnerabilities for packages: dnsmasq...

GHSA-M62J-63MF-XR95 vulnerabilities

Vulnerabilities for packages: dnsmasq...

GHSA-4RRV-PMRH-2VC4 vulnerabilities

Vulnerabilities for packages: dnsmasq...

GHSA-HJXH-HMM9-WCMC vulnerabilities

Vulnerabilities for packages: dnsmasq...

CVE-2026-4892 vulnerabilities

Vulnerabilities for packages: dnsmasq...

Amazon Linux 2 : dnsmasq, --advisory ALAS2-2026-3318 (ALAS-2026-3318)

The version of dnsmasq installed on the remote host is prior to 2.76-16. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3318 advisory. A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute...

Amazon Linux 2023 : dnsmasq, dnsmasq-utils (ALAS2023-2026-1729)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1729 advisory. A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafte...

USN-8268-1: Dnsmasq vulnerabilities

Andrew S. Fasano, Royce M, and Hugo Martinez Ray discovered that Dnsmasq did not allocate the necessary space to store domain names in some contexts. An attacker could possibly use this issue to write out-of-bounds, and could cause a denial of service or execute arbitrary code. CVE-2026-2291 Royc...

[SECURITY] [DSA 6264-1] dnsmasq security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6264-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 11, 2026 https://www.debian.org/security/faq -...

Debian dsa-6264 : dnsmasq - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6264 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6264-1 [email protected]...

MiracleLinux 8 : dnsmasq-2.79-13.el8.1 (AXSA:2021-1363:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1363:03 advisory. dnsmasq: heap-based buffer overflow in sortrrset when DNSSEC is enabled CVE-2020-25681 dnsmasq: buffer overflow in extractname due to missing length...

EUVD-2015-3341

Malware in sbrugna...

TencentOS Server 3: dnsmasq (TSSA-2023:0083)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0083 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: dnsmasq (TSSA-2022:0246)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0246 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Alibaba Cloud Linux 3 : 0009: dnsmasq (ALINUX3-SA-2021:0009)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0009 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-25681: A flaw was found in dnsmas...

Advisory ROSA-SA-2025-2839

Software: dnsmasq 2.79 OS: ROSA Virtualization 2.1 packageevrstring: dnsmasq-2.79-33.0.1.rv3 CVE-ID: CVE-2020-25682 BDU-ID: 2021-01118 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the extractname function rfc1035.c of the dnsmasq DNS server is related to a buffer overflow in dynamic memory...

SUSE SLES15 Security Update : dnsmasq (SUSE-SU-2025:0130-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0130-1 advisory. - Version update to 2.90: - CVE-2023-50387: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dnsmasq (SUSE-SU-2025:0071-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0071-1 advisory. - Version update to 2.90: - CVE-2023-50387: Fixed a Denial Of Service while trying to validate...