Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-5172

Опубликовано: 11 мая 2026
Источник: nvd
CVSS3: 7.3
CVSS3: 7.5
EPSS Низкий

Описание

A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

EPSS

Процентиль: 84%
0.02683
Низкий

7.3 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.3
ubuntu
3 месяца назад

A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

CVSS3: 7.5
redhat
3 месяца назад

A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

CVSS3: 7.3
msrc
2 месяца назад

CVE-2026-5172

CVSS3: 7.3
debian
3 месяца назад

A buffer overflow in dnsmasq\u2019s extract_addresses() function allow ...

CVSS3: 7.3
github
3 месяца назад

A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

EPSS

Процентиль: 84%
0.02683
Низкий

7.3 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-125