Thekelleys vulnerabilities

Products

• Dnsmasq 39

Newest

• thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation CVE-2026-12969 Fix available 5.3 MediumJune 23, 2026
• thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies CVE-2026-12725 Fix available 5.9 MediumJune 22, 2026
• thekelleys dnsmasq dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. CVE-2023-49441 Fix available 7.5 HighJune 6, 2024
• fedoraproject fedora, isc bind, microsoft windows server 2008 +10 more +12 more Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers... CVE-2023-50387 Public exploitFix available EPSS 100.0% 7.5 HighFebruary 13, 2024
• thekelleys dnsmasq An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was... CVE-2023-28450 Fix available 7.5 HighMarch 15, 2023
• dnsmasq, redhat enterprise linux +1 more A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an... CVE-2022-0934 Fix available 7.5 HighApril 7, 2022
• thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from... CVE-2021-45951 Disputed 9.8 CriticalDecember 31, 2021
• thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). CVE-2021-45952 Fix availableDisputed 9.8 CriticalDecember 31, 2021
• thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and... CVE-2021-45954 Disputed 9.8 CriticalDecember 31, 2021
• thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and... CVE-2021-45955 Fix availableDisputed 9.8 CriticalDecember 31, 2021
• thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). CVE-2021-45956 Fix availableDisputed 9.8 CriticalDecember 31, 2021
• thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest... CVE-2021-45957 Fix availableDisputed 9.8 CriticalDecember 31, 2021
• thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and... CVE-2021-45953 Fix availableDisputed 9.8 CriticalDecember 31, 2021
• dnsmasq, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +1 more +3 more A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for... CVE-2021-3448 Fix available 4.0 MediumApril 8, 2021
• dnsmasq, debian linux, fedoraproject fedora +2 more A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in... CVE-2020-25687 Fix available EPSS 89.3% 5.9 MediumJanuary 19, 2021
• dnsmasq, arista eos, debian linux +1 more +3 more A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check... CVE-2020-25686 Public exploitFix available 3.7 LowJanuary 19, 2021
• dnsmasq, arista eos, debian linux +1 more +3 more A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,... CVE-2020-25685 Fix available 3.7 LowJanuary 19, 2021
• dnsmasq, arista eos, debian linux +1 more +3 more A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,... CVE-2020-25684 Fix available 3.7 LowJanuary 19, 2021
• dnsmasq, debian linux, fedoraproject fedora +2 more A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in... CVE-2020-25683 Fix available EPSS 88.8% 5.9 MediumJanuary 19, 2021
• dnsmasq, debian linux, fedoraproject fedora +2 more A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the... CVE-2020-25682 Fix available EPSS 75.1% 8.1 HighJanuary 19, 2021
• dnsmasq, debian linux, fedoraproject fedora +2 more A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in... CVE-2020-25681 Fix available EPSS 84.1% 8.1 HighJanuary 19, 2021
• dnsmasq, fedoraproject fedora +1 more A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote... CVE-2019-14834 Fix available 3.7 LowDecember 5, 2019
• thekelleys dnsmasq, debian linux +1 more Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send... CVE-2019-14513 Fix available 7.5 HighAugust 1, 2019
• dnsmasq A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78.... CVE-2017-15107 Fix available 7.5 HighJanuary 23, 2018
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 more Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, -... CVE-2017-14496 Public exploitFix available EPSS 68.4% 7.5 HighOctober 2, 2017
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 more Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is... CVE-2017-14495 Public exploitFix available EPSS 85.4% 7.5 HighOctober 2, 2017
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 more dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive... CVE-2017-14494 Public exploitFix available EPSS 70.5% 5.9 MediumOctober 2, 2017
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 more Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of... CVE-2017-14493 Public exploitFix available EPSS 85.2% 9.8 CriticalOctober 2, 2017
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 more Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of... CVE-2017-14492 Public exploitFix available EPSS 94.5% 9.8 CriticalOctober 2, 2017
• thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 more Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of... CVE-2017-14491 Public exploitFix available EPSS 86.5% 9.8 CriticalOctober 2, 2017
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 more In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size... CVE-2017-13704 Fix available EPSS 65.4% 7.5 HighOctober 2, 2017
• thekelleys dnsmasq, canonical ubuntu linux +1 more Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with... CVE-2015-8899 Fix available 7.5 HighDecember 31, 2015
• thekelleys dnsmasq, oracle solaris +1 more The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of... CVE-2015-3294 Fix available 6.4 MediumJuly 1, 2014
• thekelleys dnsmasq Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from... CVE-2013-0198 Fix available 5.0 MediumMarch 4, 2013
• thekelleys dnsmasq, redhat enterprise linux desktop, enterprise linux server +1 more +3 more Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from... CVE-2012-3411 Fix available 5.0 MediumMarch 4, 2013
• thekelleys dnsmasq The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows... CVE-2009-2958 Public exploitFix available EPSS 10.4% 4.3 MediumSeptember 1, 2009
• thekelleys dnsmasq Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when -... CVE-2009-2957 Public exploitFix available EPSS 15.3% 6.8 MediumSeptember 1, 2009
• thekelleys dnsmasq dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing... CVE-2008-3214 Fix available 7.8 HighJuly 18, 2008
• thekelleys dnsmasq Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that... CVE-2005-0877 Fix available 7.5 HighMarch 26, 2005