{"id":"CVE-2026-6507","aliases":["DEBIAN-CVE-2026-6507","EUVD-2026-23419","GHSA-28hj-3gj2-63m5","SUSE-SU-2026:1934-1","SUSE-SU-2026:21640-1","SUSE-SU-2026:21677-1","SUSE-SU-2026:21733-1","SUSE-SU-2026:21788-1","SUSE-SU-2026:22454-1","SUSE-SU-2026:22496-1","SUSE-SU-2026:2458-1","UBUNTU-CVE-2026-6507","USN-8308-1","openSUSE-SU-2026:10605-1","openSUSE-SU-2026:20748-1","openSUSE-SU-2026:21192-1"],"status":"published","title":"Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing","description":"A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00482,"percentile":0.4182,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-04-17T12:23:31Z","modified":"2026-11-05T22:18:53Z","fixes":[{"ecosystem":"Debian:14","package":"dnsmasq","fixed_in":["2.92-4"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"dnsmasq","fixed_in":["2.92-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","fixed_in":["2.92-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:14","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-4"}]}],"versions":["2.91-1","2.92-1","2.92-1+exp1","2.92-1~exp1","2.92-2","2.92-3","2.92~rc1-1","2.92~rc3-1"]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.93-slfo.1.1_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.93-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.93-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92rel2-18.27.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92rel2-18.27.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-1ubuntu0.3"}]}],"versions":["2.91-1build1","2.92~rc3-1","2.92-1","2.92-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-1ubuntu0.3"}]}],"versions":["2.91-1build1","2.92~rc3-1","2.92-1","2.92-1ubuntu0.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.93-160000.1.1"}]}],"bundled":3}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat openshift container platform 4"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-6507","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2459181","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6507"},{"url":"https://github.com/advisories/GHSA-28hj-3gj2-63m5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-6507","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261934-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247812","tags":["report"]},{"url":"https://bugzilla.suse.com/1257934","tags":["report"]},{"url":"https://bugzilla.suse.com/1258251","tags":["report"]},{"url":"https://bugzilla.suse.com/1262487","tags":["report"]},{"url":"https://bugzilla.suse.com/1265001","tags":["report"]},{"url":"https://bugzilla.suse.com/1265002","tags":["report"]},{"url":"https://bugzilla.suse.com/1265003","tags":["report"]},{"url":"https://bugzilla.suse.com/1265004","tags":["report"]},{"url":"https://bugzilla.suse.com/1265006","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6507","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621640-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235517","tags":["report"]},{"url":"https://bugzilla.suse.com/1235834","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621677-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621733-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621788-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622454-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268764","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12725","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622496-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262458-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-6507","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6507","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8308-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-6507","title":"Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing","description":"A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).","status":"published","published":"2026-04-17T12:23:31.852Z","modified":"2026-11-05T22:10:33.602Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-05T23:55:29.66083Z"}],"euvd":[{"id":"EUVD-2026-23419","description":"A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).","status":"published","published":"2026-04-17T12:23:31Z","modified":"2026-11-05T22:10:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T23:02:19.769742Z"}],"ghsa":[{"id":"GHSA-28hj-3gj2-63m5","title":"A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability...","description":"A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).","status":"published","published":"2026-04-17T15:31:18Z","modified":"2026-04-17T15:31:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:07:31.795355Z"}],"nvd":[{"id":"CVE-2026-6507","description":"A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).","status":"published","published":"2026-04-17T13:16:14.967Z","modified":"2026-11-05T22:18:53.103Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-05T23:57:17.922269Z"}],"osv":[{"id":"DEBIAN-CVE-2026-6507","description":"A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).","status":"published","published":"2026-04-17T13:16:14.967Z","modified":"2026-10-26T11:47:34.760780479Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:58.699079Z"},{"id":"UBUNTU-CVE-2026-6507","description":"A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).","status":"published","published":"2026-04-17T13:16:00Z","modified":"2026-05-26T20:00:13.783860459Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:53.710209Z"},{"id":"openSUSE-SU-2026:10605-1","title":"dnsmasq-2.92-3.1 on GA media","description":"These are all security issues fixed in the dnsmasq-2.92-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-23T00:00:00Z","modified":"2026-04-24T08:15:52.116569Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20748-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-2291: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect\n  (bsc#1258251).\n- CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).\n- CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).\n- CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).\n- CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks\n  (bsc#1265004).\n- CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).\n- CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).\n\nNon security issues:\n\n- aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812).\n- Drop rcFOO symlinks for CODE16 (jsc#PED-266.\n- libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).\n- unknown user or group: dnsmasq with latest proposed dnsmasq update when doing virsh net-start (bsc#1235517).\n- Update to security release 2.92rel2.\n","status":"published","published":"2026-05-13T16:33:13Z","modified":"2026-05-19T18:23:48.128076889Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:21192-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nUpdate to 2.93:\n\n- CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764).\n\nChanges for dnsmasq:\n\n * CVE-2026-12725, bsc#1268764: Heap buffer overflow in\n `log_query()` when logging unsupported DS/DNSKEY replies.\n * Fix a corner-case in DNSSEC validation with wildcards.\n * Fix DNSSEC failure with spurious RRSIGs.\n * Fix DNSSEC fail with CNAME replies to DS queries.\n * Fix regression in 2.92 release which broke DHCPv6 when a DHCP\n relay is in use.\n * Modify the inotify implementation so that inotify watches are\n only created after dnsmasq has changed permissions and userid.\n * CVE-2026-2291: Rework storage allocation for domain names.\n","status":"published","published":"2026-06-29T07:41:58Z","modified":"2026-07-03T18:24:23.808557419Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:1934-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).\n- CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).\n- CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).\n- CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks\n  (bsc#1265004).\n- CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).\n- CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).\n\nNon security issues:\n\n- Updated to security release 2.92rel2.\n- aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812).\n- Drop rcFOO symlinks for CODE16 (jsc#PED-266).\n- libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).\n","status":"published","published":"2026-05-18T07:40:10Z","modified":"2026-05-19T08:45:07.254454446Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:21640-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-2291: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect\n  (bsc#1258251).\n- CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).\n- CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).\n- CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).\n- CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks\n  (bsc#1265004).\n- CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).\n- CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).\n\nNon security issues:\n\n- aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812).\n- Drop rcFOO symlinks for CODE16 (jsc#PED-266.\n- libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).\n- unknown user or group: dnsmasq with latest proposed dnsmasq update when doing virsh net-start (bsc#1235517).\n- Update to security release 2.92rel2.\n","status":"published","published":"2026-05-13T16:34:00Z","modified":"2026-05-16T18:25:49.625952Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21677-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-2291: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect\n  (bsc#1258251).\n- CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).\n- CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).\n- CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).\n- CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks\n  (bsc#1265004).\n- CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).\n- CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).\n\nNon security issues:\n\n- aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812).\n- Drop rcFOO symlinks for CODE16 (jsc#PED-266).\n- libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).\n\nChanges for dnsmasq:\n\n- Update to security release 2.92rel2\n","status":"published","published":"2026-05-15T10:44:28Z","modified":"2026-05-20T18:23:55.697682444Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21733-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-2291: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect\n  (bsc#1258251).\n- CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).\n- CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).\n- CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).\n- CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks\n  (bsc#1265004).\n- CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).\n- CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).\n\nNon security issues:\n\n- aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812).\n- Drop rcFOO symlinks for CODE16 (jsc#PED-266).\n- libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).\n\nChanges for dnsmasq:\n\n- Update to security release 2.92rel2\n","status":"published","published":"2026-05-19T11:42:27Z","modified":"2026-05-23T18:23:40.378661943Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21788-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nSecurity issues:\n\n- CVE-2026-2291: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect\n  (bsc#1258251).\n- CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).\n- CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).\n- CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).\n- CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks\n  (bsc#1265004).\n- CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).\n- CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).\n\nNon security issues:\n\n- aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812).\n- Drop rcFOO symlinks for CODE16 (jsc#PED-266.\n- libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).\n- unknown user or group: dnsmasq with latest proposed dnsmasq update when doing virsh net-start (bsc#1235517).\n- Update to security release 2.92rel2.\n","status":"published","published":"2026-05-13T16:34:00Z","modified":"2026-05-28T18:24:08.539527583Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22454-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nUpdate to 2.93:\n\n- CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764).\n","status":"published","published":"2026-06-30T11:07:00Z","modified":"2026-07-04T18:24:20.228328735Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22496-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\nUpdate to 2.93:\n\n- CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764).\n\nChanges for dnsmasq:\n\n * CVE-2026-12725, bsc#1268764: Heap buffer overflow in\n `log_query()` when logging unsupported DS/DNSKEY replies.\n * Fix a corner-case in DNSSEC validation with wildcards.\n * Fix DNSSEC failure with spurious RRSIGs.\n * Fix DNSSEC fail with CNAME replies to DS queries.\n * Fix regression in 2.92 release which broke DHCPv6 when a DHCP\n relay is in use.\n * Modify the inotify implementation so that inotify watches are\n only created after dnsmasq has changed permissions and userid.\n * CVE-2026-2291: Rework storage allocation for domain names.\n","status":"published","published":"2026-06-29T07:42:51Z","modified":"2026-07-07T18:24:06.577068313Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2458-1","title":"Security update for dnsmasq","description":"This update for dnsmasq fixes the following issues\n\n- CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect\n  (bsc#1258251).\n- CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).\n- CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).\n- CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).\n- CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks\n  (bsc#1265004).\n- CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).\n- CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).\n  \nChanges for dnsmasq:\n\n- Update to security release 2.92rel2.\n- Fix setting of compile time options from the spec file.\n","status":"published","published":"2026-06-18T15:54:25Z","modified":"2026-06-19T08:15:07.13608017Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-8308-1","title":"dnsmasq vulnerability","description":"It was discovered that Dnsmasq incorrectly handled BOOTREPLY packets when\nconfigured with the --dhcp-split-relay option. A remote attacker could\nuse this issue to cause Dnsmasq to crash, resulting in a denial of\nservice, or possibly execute arbitrary code.","status":"published","published":"2026-05-26T18:19:29Z","modified":"2026-05-26T20:14:14.071171196Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}