Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1826-1

Опубликовано: 12 мая 2026
Источник: suse-cvrf

Описание

Security update for dnsmasq

This update for dnsmasq fixes the following issue:

  • CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect (bsc#1258251).

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
dnsmasq-2.78-18.24.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
dnsmasq-2.78-18.24.1

Ссылки

Описание

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:dnsmasq-2.78-18.24.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dnsmasq-2.78-18.24.1
Ссылки