dnsmasq vulnerabilities
CVEs whose affected-version data names the dnsmasq package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-12969Medium· 5.3An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-lengt…
▾ Sunlitthekelleys · dnsmasqEPSS 0.40%via NVD
CVE-2026-12725Medium· 5.9A heap-based buffer overflow was found in dnsmasq
A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an …
▾ Sunlitredhat · openshift_container_platformEPSS 0.53%via NVD