USN-8833-1: libvirt vulnerabilities
Ubuntu patches libvirt flaws including CVE-2026-61477, letting local attackers with network-definition rights inject dnsmasq config and execute commands as root.
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #dnsmasq
Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root
Six dnsmasq flaws enable DNS cache poisoning, DoS, memory leaks, and local root code execution; fixes ship in version 2.92rel2.
2
ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability
ZDI disclosed an unauthenticated infinite-loop denial-of-service flaw (CVE-2026-4890) in dnsmasq DNSSEC NSEC/NSEC3 bitmap processing.