Skip to contentThekelleys Dnsmasq vulnerabilities
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreDnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validationCVE-2026-12969Fix available5.3 Medium
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey repliesCVE-2026-12725Fix available5.9 Medium
- thekelleys dnsmasqdnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.CVE-2023-49441Fix available7.5 High
- fedoraproject fedora, isc bind, microsoft windows server 2008 +10 more +12 moreCertain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers...CVE-2023-50387Public exploitFix availableEPSS 100.0%7.5 High
- thekelleys dnsmasqAn issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was...CVE-2023-28450Fix available7.5 High
- dnsmasq, redhat enterprise linux +1 moreA single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an...CVE-2022-0934Fix available7.5 High
- thekelleys dnsmasqDnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from...CVE-2021-45951Disputed9.8 Critical
- thekelleys dnsmasqDnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp).CVE-2021-45952Fix availableDisputed9.8 Critical
- thekelleys dnsmasqDnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and...CVE-2021-45954Disputed9.8 Critical
- thekelleys dnsmasqDnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and...CVE-2021-45955Fix availableDisputed9.8 Critical
- thekelleys dnsmasqDnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply).CVE-2021-45956Fix availableDisputed9.8 Critical
- thekelleys dnsmasqDnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest...CVE-2021-45957Fix availableDisputed9.8 Critical
- thekelleys dnsmasqDnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and...CVE-2021-45953Fix availableDisputed9.8 Critical
- dnsmasq, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +1 more +3 moreA flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for...CVE-2021-3448Fix available4.0 Medium
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25687Fix availableEPSS 89.3%5.9 Medium
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check...CVE-2020-25686Public exploitFix available3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...CVE-2020-25685Fix available3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...CVE-2020-25684Fix available3.7 Low
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25683Fix availableEPSS 88.8%5.9 Medium
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the...CVE-2020-25682Fix availableEPSS 75.1%8.1 High
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25681Fix availableEPSS 84.1%8.1 High
- dnsmasq, fedoraproject fedora +1 moreA vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote...CVE-2019-14834Fix available3.7 Low
- thekelleys dnsmasq, debian linux +1 moreImproper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send...CVE-2019-14513Fix available7.5 High
- dnsmasqA vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78....CVE-2017-15107Fix available7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreInteger underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, -...CVE-2017-14496Public exploitFix availableEPSS 68.4%7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 moreMemory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is...CVE-2017-14495Public exploitFix availableEPSS 85.4%7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 morednsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive...CVE-2017-14494Public exploitFix availableEPSS 70.5%5.9 Medium
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 moreStack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14493Public exploitFix availableEPSS 85.2%9.8 Critical
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14492Public exploitFix availableEPSS 94.5%9.8 Critical
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreIn dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size...CVE-2017-13704Fix availableEPSS 65.4%7.5 High
- thekelleys dnsmasq, canonical ubuntu linux +1 moreDnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with...CVE-2015-8899Fix available7.5 High
- thekelleys dnsmasq, oracle solaris +1 moreThe tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of...CVE-2015-3294Fix available6.4 Medium
- thekelleys dnsmasqDnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from...CVE-2013-0198Fix available5.0 Medium
- thekelleys dnsmasq, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreDnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from...CVE-2012-3411Fix available5.0 Medium
- thekelleys dnsmasqThe tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows...CVE-2009-2958Public exploitFix availableEPSS 10.4%4.3 Medium
- thekelleys dnsmasqHeap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when -...CVE-2009-2957Public exploitFix availableEPSS 15.3%6.8 Medium
- thekelleys dnsmasqdnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing...CVE-2008-3214Fix available7.8 High
- thekelleys dnsmasqDnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that...CVE-2005-0877Fix available7.5 High