Browse CVEs

HIGH 7.5 CVE-2023-49441 dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. Dnsmasq No fix yet Fix from $1,9502024-06-06 HIGH 7.5 CVE-2023-28450 An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day… Dnsmasq 2.90+ Fix from $1,9502023-03-15 CRITICAL 9.8 CVE-2021-45951 Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the ve… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45952 Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-4595… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45953 Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45954 Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45955 Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper boun… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45956 Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-4595… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45957 Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is… Dnsmasq No fix yet Fix from $2,3002022-01-01 HIGH 7.5 CVE-2017-15107 A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly … Dnsmasq after 2.78 Fix from $1,9502018-01-23 MEDIUM 6.4 CVE-2015-3294 The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attacke… Dnsmasq after 2.73 Fix from $1,6002015-05-08 MEDIUM 5.0 CVE-2013-0198 Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers… Dnsmasq after 2.65 Fix from $1,6002013-03-05 MEDIUM 6.8 CVE-2009-2957EPSS 13% Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to… Dnsmasq after 2.49 Fix from $1,6002009-09-02 HIGH 7.8 CVE-2008-3214 dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for… Dnsmasq No fix yet Fix from $1,9502008-07-18 HIGH 7.5 CVE-2005-0877 Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq. Dnsmasq 2.21+ Fix from $1,9502005-05-02