dnsmasq
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-6507 | 2.92 – < 2.93 | Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing | HIGH 7.5 | 0.5 % | ||
| CVE-2022-0934 | Not-Known | A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet process | HIGH 7.5 | 2.6 % | ||
| CVE-2021-3448 | dnsmasq 2.85 | A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a | MEDIUM 4.0 | 2.3 % | ||
| CVE-2020-14312 | Fedora version prior to 31 ; all RHEL versions | A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise | MEDIUM 5.9 | 1.2 % | ||
| CVE-2020-25686 | dnsmasq 2.83 | A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same | LOW 3.7 | 5.5 % | ||
| CVE-2020-25681 | dnsmasq 2.83 | A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating | HIGH 8.1 | 84 % | ||
| CVE-2020-25687 | dnsmasq 2.83 | A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it | MEDIUM 5.9 | 89 % | ||
| CVE-2020-25682 | dnsmasq 2.83 | A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets be | HIGH 8.1 | 75 % | ||
| CVE-2020-25683 | dnsmasq 2.83 | A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it | MEDIUM 5.9 | 89 % | ||
| CVE-2020-25684 | dnsmasq 2.83 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() | LOW 3.7 | 4.2 % | ||
| CVE-2020-25685 | dnsmasq 2.83 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), whi | LOW 3.7 | 2.2 % |