Known vulnerabilities in dnsmasq (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:dnsmasq_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 18
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dnsmasq (Ubuntu package) dnsmasq (Ubuntu package) is affected by 18 known vulnerabilities: 3 high, 11 medium, 4 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131139 - Out-of-bounds write
CVE-2026-2291
CWE-787 Medium
No
No
2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 12.05.2026 SB2026051245
SB20260513103
SB20260513104
and 14 more
#VU131140 - Improper input validation
CVE-2026-4890
CWE-20 Medium
No
No
2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 12 more
#VU131141 - Out-of-bounds read
CVE-2026-5172
CWE-125 Medium
No
No
2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 5 more
#VU131142 - Improper input validation
CVE-2026-4893
CWE-20 Medium
No
No
2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 12 more
#VU131143 - Stack-based buffer overflow
CVE-2026-4892
CWE-121 High
No
No
2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 12 more
#VU131144 - Improper input validation
CVE-2026-4891
CWE-20 Medium
No
No
2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 12 more
#VU63013 - Use After Free
CVE-2022-0934
CWE-416 Medium
No
No
2.79-1ubuntu0.6, 2.80-1.1ubuntu1.5, 2.85-1ubuntu2.1, 2.86-1.1ubuntu0.1 11.05.2022 SB2022051113
SB2022051132
SB2022092222
and 19 more
#VU52065 - Insufficient Verification of Data Authenticity
CVE-2021-3448
CWE-345 Medium
No
No
2.79-1ubuntu0.4, 2.80-1.1ubuntu1.4, 2.82-1ubuntu1.3, 2.84-1ubuntu2.1, 2.791ubuntu0.16.04.1+esm1 13.04.2021 SB2021041305
SB2021041306
SB2021052607
and 10 more
#VU49846 - Heap-based Buffer Overflow
CVE-2020-25687
CWE-122 Medium
No
No
2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 20.01.2021 SB2021012070
SB20210120109
SB20210120122
and 12 more
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686
CWE-345 Low
Available
No
2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685
CWE-327 Low
Available
No
2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684
CWE-345 Low
Available
No
2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more
#VU49842 - Heap-based Buffer Overflow
CVE-2020-25683
CWE-122 Medium
No
No
2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 20.01.2021 SB2021012070
SB20210120105
SB20210120122
and 12 more
#VU49841 - Heap-based Buffer Overflow
CVE-2020-25682
CWE-122 High
No
No
2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 20.01.2021 SB2021012070
SB20210120104
SB20210120122
and 14 more
#VU49840 - Heap-based Buffer Overflow
CVE-2020-25681
CWE-122 High
No
No
2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 20.01.2021 SB2021012070
SB20210120103
SB20210120122
and 14 more
#VU31907 - Resource exhaustion
CVE-2019-14834
CWE-400 Low
No
No
2.68-1ubuntu0.2+esm3, 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 07.01.2020 SB2019121131
SB2019121940
SB2020093042
and 7 more
#VU19919 - Out-of-bounds read
CVE-2019-14513
CWE-125 Medium
No
No
2.75-1ubuntu0.16.04.10 02.08.2019 SB2019080205
SB2017080115
SB2021042216
#VU33708 - Improper input validation
CVE-2017-15107
CWE-20 Medium
No
No
2.75-1ubuntu0.16.04.10 23.01.2018 SB2018012322
SB2019121131
SB2018040341
and 4 more