Поиск уязвимостей
Количество 10
Количество 10
CVE-2026-12969
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions.
CVE-2026-12969
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions.
CVE-2026-12969
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions.
CVE-2026-12969
Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation
CVE-2026-12969
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() fun ...
GHSA-wmwj-946w-3m8w
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions.
SUSE-SU-2026:3028-1
Security update for dnsmasq
SUSE-SU-2026:2974-1
Security update for dnsmasq
ALT-PU-2026-11526
ALT-PU-2026-11526: package `dnsmasq` update to version 2.90-alt2.p10.3
ALT-PU-2026-10763
ALT-PU-2026-10763: package `dnsmasq` update to version 2.93-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-12969 An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions. | CVSS3: 5.3 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-12969 An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions. | CVSS3: 5.3 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-12969 An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions. | CVSS3: 5.3 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-12969 Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation | CVSS3: 5.3 | 0% Низкий | 5 месяцев назад |
| CVE-2026-12969 An out-of-bounds read vulnerability exists in dnsmasq's find_soa() fun ... | CVSS3: 5.3 | 0% Низкий | 5 месяцев назад |
| GHSA-wmwj-946w-3m8w An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions. | CVSS3: 5.3 | 0% Низкий | 5 месяцев назад |
 | SUSE-SU-2026:3028-1 Security update for dnsmasq | 4 месяца назад | ||
| SUSE-SU-2026:2974-1 Security update for dnsmasq | 4 месяца назад | ||
| ALT-PU-2026-11526 ALT-PU-2026-11526: package `dnsmasq` update to version 2.90-alt2.p10.3 | CVSS3: 5.9 | 3 месяца назад | |
| ALT-PU-2026-10763 ALT-PU-2026-10763: package `dnsmasq` update to version 2.93-alt1 | CVSS3: 5.9 | 5 месяцев назад |
Уязвимостей на страницу