Known vulnerabilities in dnsmasq (Alpine package)

Vendor: Alpine Linux Development Team
Software: dnsmasq (Alpine package)
Software CPE: cpe:2.3:o:alpine:dnsmasq_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 17
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dnsmasq (Alpine package) dnsmasq (Alpine package) is affected by 17 known vulnerabilities: 3 high, 9 medium, 5 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49846 - Heap-based Buffer Overflow
CVE-2020-25687		 CWE-122 Medium
No
No
 2.83-r0 20.01.2021 SB2021012070
SB20210120109
SB20210120122
and 12 more
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686		 CWE-345 Low
Available
No
 2.83-r0 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685		 CWE-327 Low
Available
No
 2.83-r0 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684		 CWE-345 Low
Available
No
 2.83-r0 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more
#VU49842 - Heap-based Buffer Overflow
CVE-2020-25683		 CWE-122 Medium
No
No
 2.83-r0 20.01.2021 SB2021012070
SB20210120105
SB20210120122
and 12 more
#VU49841 - Heap-based Buffer Overflow
CVE-2020-25682		 CWE-122 High
No
No
 2.83-r0 20.01.2021 SB2021012070
SB20210120104
SB20210120122
and 14 more
#VU49840 - Heap-based Buffer Overflow
CVE-2020-25681		 CWE-122 High
No
No
 2.83-r0 20.01.2021 SB2021012070
SB20210120103
SB20210120122
and 14 more
#VU31907 - Resource exhaustion
CVE-2019-14834		 CWE-400 Low
No
No
 2.79-r4 07.01.2020 SB2019121131
SB2019121940
SB2020093042
and 7 more
#VU33708 - Improper input validation
CVE-2017-15107		 CWE-20 Medium
No
No
 2.76-r3 23.01.2018 SB2018012322
SB2019121131
SB2018040341
and 4 more
#VU8666 - Memory corruption
CVE-2017-13704		 CWE-119 Medium
No
No
 2.78-r0 03.10.2017 SB2017100301
SB2017100407
SB2017112901
and 3 more
#VU8665 - Memory corruption
CVE-2017-14496		 CWE-119 Medium
Available
No
 2.76-r1, 2.76-r2 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8664 - Resource exhaustion
CVE-2017-14495		 CWE-400 Medium
Available
No
 2.76-r1, 2.76-r2 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8663 - Missing release of memory after effective lifetime
CVE-2017-14494		 CWE-401 Low
Available
No
 2.76-r1, 2.76-r2 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8662 - Heap-based Buffer Overflow
CVE-2017-14493		 CWE-122 Medium
Available
No
 2.76-r1, 2.76-r2 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8661 - Heap-based Buffer Overflow
CVE-2017-14492		 CWE-122 Medium
Available
No
 2.76-r1, 2.76-r2 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8660 - Heap-based Buffer Overflow
CVE-2017-14491		 CWE-122 High
Available
No
 2.76-r1, 2.76-r2 02.10.2017 SB2017100301
SB2017100302
SB2017100304
and 24 more
#VU32274 - Improper input validation
CVE-2015-8899		 CWE-20 Medium
No
No
 2.76-r0 30.06.2016 SB2016063013
SB2017010306
SB2016122312
and 7 more