CVE20265172poc

CVE20265172poc CVE-2026-5172: desbordamiento de búfer en extractaddresses en un PoC de registro de recursos manipulado Topología: leer aquí https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Pasos​ 1. vi /etc/dnsmasq.conf​ port=5353...

The vulnerability of the extract_addresses() function in the DNS server library Dnsmasq allows a hacker to induce a service failure.

The vulnerability of the extractaddresses function in the DNS server library Dnsmasq is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

MGASA-2026-0135 Updated dnsmasq packages fix security vulnerabilities

CVE-2026-2291: dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. CVE-2026-4890: A Denial of Service DoS...

AZL-86766 CVE-2026-5172 affecting package dnsmasq for versions less than 2.92-1

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

CVE-2026-5172 CVE-2026-5172

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

CVE-2026-5172: Out-of-bounds Read

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

dnsmasq -- multiple vulnerabilities

Simon Kelley reports: Today, 11th May 2026 CERT is releasing a set of six CVEs for serious security vulnerabilities in dnsmasq. These are all long-standing bugs which apply to pretty much all non-ancient versions. Christopher Cullen and Molly Jaconski write, in Vulnerability Note VU471747:...