Every CVE Search/ Get API key

CVE-2026-13002

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An...

4.4 MediumRejected

Rejected as this CVE is duplicate to CVE-2026-4890.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

What each source reports

GitHub Advisories Score usedGHSA-gf7x-hg8h-x3gf 4.4

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An...

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.

Record
GHSA-gf7x-hg8h-x3gf
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
CVE List No score

Rejected as this CVE is duplicate to CVE-2026-4890.

Record
CVE-2026-13002
Updated
2026-11-02
EUVDEUVD-2026-58674 4.4

Rejected as this CVE is duplicate to CVE-2026-4890.

Record
EUVD-2026-58674
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD No score

Rejected reason: Rejected as this CVE is duplicate to CVE-2026-4890.

Record
CVE-2026-13002
Updated
2026-11-02
OSVBELL-CVE-2026-13002 4.4
Record
BELL-CVE-2026-13002
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-13002 4.4

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.

Record
DEBIAN-CVE-2026-13002
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-13002 4.4

Rejected reason: Rejected as this CVE is duplicate to CVE-2026-4890.

Record
UBUNTU-CVE-2026-13002
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVAZL-96617 No score

CVE-2026-13002 affecting package dnsmasq 2.93-1

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.

Record
AZL-96617
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
dnsmasq
Azure Linux:3
 through 2.93-1 None known
dnsmasq
Alpaquita:23
 2.87-r0 and later None known
dnsmasq
Alpaquita:25
 2.91-r0 and later None known
dnsmasq
Alpaquita:stream
 2.89-r2 and later None known
dnsmasq
Debian:12
 All versions, plus listed versions
2.89-12.90-12.90-22.90-32.90-4
Show 20 moreShow less
2.90-4~deb12u12.90-4~deb12u22.90-52.90-62.90-72.91-12.91~test6-12.91~test9-12.92-12.92-1+exp12.92-1~exp12.92-22.92-32.92-42.92-52.92~rc1-12.92~rc3-12.93-12.93-22.93-3
 None known
dnsmasq
Debian:13
 All versions, plus listed versions
2.91-12.91-1+deb13u12.91-1+deb13u22.92-12.92-1+exp1
Show 10 moreShow less
2.92-1~exp12.92-22.92-32.92-42.92-52.92~rc1-12.92~rc3-12.93-12.93-22.93-3
 None known
dnsmasq
Debian:14
 All versions, plus listed versions
2.91-12.92-12.92-1+exp12.92-1~exp12.92-2
Show 8 moreShow less
2.92-32.92-42.92-52.92~rc1-12.92~rc3-12.93-12.93-22.93-3
 None known
dnsmasq
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.66-4ubuntu12.67-12.68-12.68-1ubuntu0.12.68-1ubuntu0.2
Show 5 moreShow less
2.68-1ubuntu0.2+esm12.68-1ubuntu0.2+esm22.68-1ubuntu0.2+esm32.68-1ubuntu0.2+esm52.68-1ubuntu0.2+esm6
 None known
dnsmasq
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.75-12.75-1ubuntu0.16.04.12.75-1ubuntu0.16.04.22.75-1ubuntu0.16.04.32.75-1ubuntu0.16.04.4
Show 10 moreShow less
2.75-1ubuntu0.16.04.52.75-1ubuntu0.16.04.72.75-1ubuntu0.16.04.82.75-1ubuntu0.16.04.102.75-1ubuntu0.16.04.10+esm12.79-1ubuntu0.16.04.1+esm12.79-1ubuntu0.16.04.1+esm22.90-0ubuntu0.16.04.1+esm12.90-0ubuntu0.16.04.1+esm32.90-0ubuntu0.16.04.1+esm4
 None known
dnsmasq
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.78-12.78-32.79-12.79-1ubuntu0.22.79-1ubuntu0.3
Show 7 moreShow less
2.79-1ubuntu0.42.79-1ubuntu0.52.79-1ubuntu0.62.79-1ubuntu0.72.90-0ubuntu0.18.04.1+esm12.90-0ubuntu0.18.04.1+esm32.90-0ubuntu0.18.04.1+esm4
 None known
Show 5 moreShow less
Affected packages
PackageAffectedFixed
dnsmasq
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.80-1ubuntu22.80-1ubuntu42.80-1.1ubuntu12.80-1.1ubuntu1.22.80-1.1ubuntu1.3
Show 7 moreShow less
2.80-1.1ubuntu1.42.80-1.1ubuntu1.52.80-1.1ubuntu1.62.80-1.1ubuntu1.72.90-0ubuntu0.20.04.12.90-0ubuntu0.20.04.1+esm22.90-0ubuntu0.20.04.1+esm3
 None known
dnsmasq
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.85-1ubuntu22.86-1.12.86-1.1ubuntu0.12.86-1.1ubuntu0.22.86-1.1ubuntu0.3
Show 7 moreShow less
2.86-1.1ubuntu0.42.86-1.1ubuntu0.52.90-0ubuntu0.22.04.12.90-0ubuntu0.22.04.32.90-0ubuntu0.22.04.42.91-0ubuntu0.22.04.12.91-0ubuntu0.22.04.2
 None known
dnsmasq
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.89-12.90-22.90-2build12.90-2build22.90-2ubuntu0.1
Show 4 moreShow less
2.90-2ubuntu0.32.90-2ubuntu0.42.91-0ubuntu0.24.04.12.91-0ubuntu0.24.04.2
 None known
dnsmasq
Ubuntu:26.10
 All versions, plus listed versions
2.92-12.93-12.93-3ubuntu1
 None known
dnsmasq
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.91-1build12.92~rc3-12.92-12.92-1ubuntu0.22.92-1ubuntu0.32.92-1ubuntu0.42.92-1ubuntu0.5
 None known

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-13002 has been rejected by its source and should not be treated as a live vulnerability, published August 14, 2026.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open