Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1827-1

Опубликовано: 12 мая 2026
Источник: suse-cvrf

Описание

Security update for dnsmasq

This update for dnsmasq fixes the following issue:

  • CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect (bsc#1258251).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Micro 5.3
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Micro 5.4
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Micro 5.5
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Server 15 SP4-LTSS
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Server 15 SP5-LTSS
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Server 15 SP6-LTSS
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
dnsmasq-2.90-150400.16.9.1
openSUSE Leap 15.6
dnsmasq-2.90-150400.16.9.1
dnsmasq-utils-2.90-150400.16.9.1

Ссылки

Описание

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsmasq-2.90-150400.16.9.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsmasq-2.90-150400.16.9.1
Ссылки