Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21192-1

Опубликовано: 29 июн. 2026
Источник: suse-cvrf

Описание

Security update for dnsmasq

This update for dnsmasq fixes the following issues

Update to 2.93:

  • CVE-2026-12725: heap buffer overflow in log_query() when logging unsupported DS/DNSKEY replies (bsc#1268764).

Changes for dnsmasq:

  • CVE-2026-12725, bsc#1268764: Heap buffer overflow in log_query() when logging unsupported DS/DNSKEY replies.
  • Fix a corner-case in DNSSEC validation with wildcards.
  • Fix DNSSEC failure with spurious RRSIGs.
  • Fix DNSSEC fail with CNAME replies to DS queries.
  • Fix regression in 2.92 release which broke DHCPv6 when a DHCP relay is in use.
  • Modify the inotify implementation so that inotify watches are only created after dnsmasq has changed permissions and userid.
  • CVE-2026-2291: Rework storage allocation for domain names.

Список пакетов

openSUSE Leap 16.0
dnsmasq-2.93-160000.1.1
dnsmasq-utils-2.93-160000.1.1

Ссылки

Описание

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Затронутые продукты
openSUSE Leap 16.0:dnsmasq-2.93-160000.1.1
openSUSE Leap 16.0:dnsmasq-utils-2.93-160000.1.1
Ссылки

Описание

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

Затронутые продукты
openSUSE Leap 16.0:dnsmasq-2.93-160000.1.1
openSUSE Leap 16.0:dnsmasq-utils-2.93-160000.1.1
Ссылки

Описание

A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).

Затронутые продукты
openSUSE Leap 16.0:dnsmasq-2.93-160000.1.1
openSUSE Leap 16.0:dnsmasq-utils-2.93-160000.1.1
Ссылки