Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root
Six dnsmasq flaws enable DNS cache poisoning, DoS, memory leaks, and local root code execution; fixes ship in version 2.92rel2.
68
Product
dnsmasq
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 13, 2026
- Last mentionedAug 24, 2026
Timeline
2 articles · newest firstZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability
ZDI disclosed an unauthenticated infinite-loop denial-of-service flaw (CVE-2026-4890) in dnsmasq DNSSEC NSEC/NSEC3 bitmap processing.
30
Related CVEs
by mentions- CVE-2026-48909%7.5A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet
- CVE-2026-4892<1%8.4A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges…
- CVE-2026-2291<1%7.3dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in…
- CVE-2026-51723%7.3A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS…
- CVE-2026-48916%5.3A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet
- CVE-2026-48932%5.3An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet…
Appears with
- dnsmasq projectorganization · 1
- Zero Day Initiativeorganization · 1
- Zero Day Initiativevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.