Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-2291

Опубликовано: 11 мая 2026
Источник: nvd
CVSS3: 7.3
EPSS Низкий

Описание

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

EPSS

Процентиль: 57%
0.0092
Низкий

7.3 High

CVSS3

Дефекты

Связанные уязвимости

CVSS3: 7.3
ubuntu
3 месяца назад

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

CVSS3: 6.5
redhat
3 месяца назад

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

CVSS3: 7.3
msrc
2 месяца назад

CVE-2026-2291

CVSS3: 7.3
debian
3 месяца назад

dnsmasqs extract_name() function can be abused to cause a heap buffer ...

suse-cvrf
3 месяца назад

Security update for dnsmasq

EPSS

Процентиль: 57%
0.0092
Низкий

7.3 High

CVSS3

Дефекты