Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2974-1

Опубликовано: 14 июл. 2026
Источник: suse-cvrf

Описание

Security update for dnsmasq

This update for dnsmasq fixes the following issues

  • CVE-2026-12725: heap buffer overflow in log_query() when logging unsupported DS/DNSKEY replies (bsc#1268764).
  • CVE-2026-12969: out-of-bounds read in find_soa() due to missing extrabytes validation (bsc#1268882).

Changes for dnsmasq:

  • Update to 2.93:
  • Fix a corner-case in DNSSEC validation with wildcards.
  • Fix DNSSEC failure with spurious RRSIGs.
  • Fix DNSSEC fail with CNAME replies to DS queries.
  • Fix regression in 2.92 release which broke DHCPv6 when a DHCP relay is in use.
  • Modify the inotify implementation so that inotify watches are only created after dnsmasq has changed permissions and userid.

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
dnsmasq-2.93-18.32.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
dnsmasq-2.93-18.32.1

Ссылки

Описание

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:dnsmasq-2.93-18.32.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dnsmasq-2.93-18.32.1
Ссылки

Описание

An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:dnsmasq-2.93-18.32.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dnsmasq-2.93-18.32.1
Ссылки
Уязвимость SUSE-SU-2026:2974-1