CVE20265172poc

CVE20265172poc CVE-2026-5172: buffer overflow in extractaddresses on crafted resource record PoC Topology read here https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Steps​ 1. vi /etc/dnsmasq.conf​ port=5353​...

Dnsmasq extract_addresses() DoS

The vulnerability of the extractaddresses function in the DNS server library Dnsmasq is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

MGASA-2026-0135 Updated dnsmasq packages fix security vulnerabilities

CVE-2026-2291: dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. CVE-2026-4890: A Denial of Service DoS...

AZL-86766 CVE-2026-5172 affecting package dnsmasq for versions less than 2.92-1

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

CVE-2026-5172 CVE-2026-5172

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

CVE-2026-5172: Out-of-bounds Read

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

dnsmasq -- multiple vulnerabilities

Simon Kelley reports: Today, 11th May 2026 CERT is releasing a set of six CVEs for serious security vulnerabilities in dnsmasq. These are all long-standing bugs which apply to pretty much all non-ancient versions. Christopher Cullen and Molly Jaconski write, in Vulnerability Note VU471747:...

dnsmasq:fuzz_rfc1035: Heap-buffer-overflow in extract_addresses

Detailed Report: https://oss-fuzz.com/testcase?key=6567280203923456 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzrfc1035 Job Type: libfuzzerasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x607000000d8c Crash State: extractaddresses...