Known vulnerabilities in dnsmasq (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
dnsmasq (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:dnsmasq_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
18
Public exploits:
3
Known exploited (KEV):
0
Breakdown by Severity Chart
2.66-4ubuntu1
2.92~rc1-1
2.92~rc3-1
2.92-1
2.92-1+exp1
2.92-2
2.92-3
2.92-4
2.92-5
2.93-1
2.93-2
2.93-3
2.90-0ubuntu0.16.04.1+esm4
2.90-0ubuntu0.18.04.1+esm4
2.90-0ubuntu0.20.04.1+esm3
2.90-0ubuntu0.22.04.4
2.90-2ubuntu0.4
2.92-1ubuntu0.4
2.92-1ubuntu0.3
2.68-1ubuntu0.2+esm5
2.90-0ubuntu0.16.04.1+esm3
2.90-0ubuntu0.18.04.1+esm3
2.90-0ubuntu0.20.04.1+esm2
2.90-0ubuntu0.22.04.3
2.90-2ubuntu0.3
2.91-1ubuntu0.2
2.92-1ubuntu0.2
2.91-1build1
2.68-1ubuntu0.2+esm3
2.91~test6-1
2.91~test9-1
2.90-7
2.90-6ubuntu1
2.90-6
2.90-5ubuntu1
2.90-5
2.90-3
2.90-2build1
2.90-2
2.90-1
2.90-0ubuntu0.23.10.1
2.90-0ubuntu0.20.04.1
2.89-1
2.88-1
2.87-1
2.87-1.1
2.86-1.1ubuntu2
2.86-1.1ubuntu2.1
2.86-1.1ubuntu1
2.86-1.1ubuntu0.5
2.86-1.1ubuntu0.4
2.86-1.1ubuntu0.3
2.86-1.1ubuntu0.2
2.86-1
2.86-1.1
2.85-1ubuntu2
2.84-1.1
2.84-1.2
2.85-1
2.85-1ubuntu1
2.84-1ubuntu2
2.83-1
2.84-1
2.84-1ubuntu1
2.82-1ubuntu2
2.82-1ubuntu1
2.82-1
2.81-4build1
2.81-4
2.80-1.1ubuntu1.7
2.80-1.1ubuntu1.6
2.59-4ubuntu0.3
2.59-4ubuntu0.4
2.91-1
2.90-4
2.90-2ubuntu0.1
2.90-2build2
2.90-0ubuntu0.22.04.1
2.79-1ubuntu0.7
2.791ubuntu0.16.04.1+esm1
2.80-1.1ubuntu1.4
2.82-1ubuntu1.3
2.84-1ubuntu2.1
2.80-1.1ubuntu1.3
2.82-1ubuntu1.2
2.80-1.1ubuntu1.2
2.82-1ubuntu1.1
2.80-1.1ubuntu1.5
2.85-1ubuntu2.1
2.86-1.1ubuntu0.1
2.79-1ubuntu0.6
2.79-1ubuntu0.5
2.79-1ubuntu0.4
2.75-1ubuntu0.16.04.10
2.79-1ubuntu0.3
2.75-1ubuntu0.16.04.8
2.79-1ubuntu0.2
2.75-1ubuntu0.16.04.7
2.81-3ubuntu2
2.81-3ubuntu1
2.81-1
2.81-2
2.80-1ubuntu3
2.80-1ubuntu4
2.80-1.1
2.81
2.81-3
2.80
2.80-1.1ubuntu1
2.79
2.75
2.68
2.59
2.80-1ubuntu2
2.80-1ubuntu1
2.80-1
2.79-1
2.78-3
2.78-2
2.78-1
2.76-5ubuntu0.2
2.76-5ubuntu0.1
2.75-1ubuntu0.16.04.5
2.75-1ubuntu0.16.04.4
2.75-1ubuntu0.16.04.3
2.68-1ubuntu0.2
2.77-2
2.77-1
2.76-5
2.76-4ubuntu0.1
2.76-4build1
2.76-4
2.76-4.1
2.76-3
2.76-1.2
2.76-2
2.76-1
2.76-1.1
2.75-1ubuntu0.16.04.2
2.75-1ubuntu0.16.04.1
2.75-1ubuntu0.15.10.1
2.75-1
2.74-1
2.73-2
2.73-1
2.72-3ubuntu0.1
2.72-3.1build1
2.72-1
2.72-2
2.72-3
2.72-3.1
2.69-1
2.70-1
2.70-2
2.70-3
2.71-1
2.71-1ubuntu0.1
2.60-1
2.60-2
2.61-1
2.62-1
2.62-2
2.62-3
2.63-1
2.63-2
2.63-3
2.63-4
2.64-1
2.65-1
2.66-1
2.66-2
2.66-3
2.66-4
2.67-1
2.68-1
2.68-1ubuntu0.1
0.95-1
0.96-1
0.98-1
0.992-1
0.994-1
0.995-1
0.996-1
1.0-1
1.1-2
1.2-1
1.2-2
1.2-3
1.2-4
1.3-1
1.4-1
1.4-2
1.5-1
1.6-1
1.7-1
1.8-1
1.9-1
1.10-1
1.11-1
1.11-2
1.12-1
1.13-1
1.13-2
1.13-3
1.13-4
1.14-1
1.15-1
1.16-1
1.17-1
1.18-1
1.18-2
2.0-1
2.1-1
2.2-1
2.3-1
2.4-1
2.4-2
2.4-3
2.5-1
2.6-1
2.6-2
2.6-3
2.7-1
2.7-2
2.8-1
2.9-1
2.9-2
2.10-1
2.11-1
2.12-1
2.13-1
2.14-1
2.15-1
2.16-1
2.16-2
2.17-1
2.18-1
2.18-2
2.19-1
2.20-1
2.21-1
2.22-1
2.22-2
2.23-1
2.24-1
2.25-1
2.26-1
2.27-1
2.28-1
2.29-1
2.30-1
2.31-1
2.32-1
2.32-2
2.33-1
2.34-1
2.35-1
2.36-1
2.37-1
2.38-1
2.39-1
2.40-1
2.41-1
2.41-2
2.42-1
2.42-2
2.42-3
2.42-4
2.43-1
2.44-1
2.45-1
2.46-1
2.47-1
2.47-2
2.47-3
2.48-1
2.48-2
2.49-1
2.50-1
2.51-1
2.52-1
2.53-1
2.55-1
2.55-2
2.56-1
2.57-1
2.58-1
2.58-2
2.58-3
2.59-1
2.59-2
2.59-3
2.59-4
2.59-4ubuntu0.1
2.59-4ubuntu0.2
Vulnerabilities (18)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131139 - Out-of-bounds write CVE-2026-2291 |
CWE-787 | Medium | 2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 | 12.05.2026 |
SB2026051245 SB20260513103 SB20260513104 and 14 more |
||
| #VU131140 - Improper input validation CVE-2026-4890 |
CWE-20 | Medium | 2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 12 more |
||
| #VU131141 - Out-of-bounds read CVE-2026-5172 |
CWE-125 | Medium | 2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 5 more |
||
| #VU131142 - Improper input validation CVE-2026-4893 |
CWE-20 | Medium | 2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 12 more |
||
| #VU131143 - Stack-based buffer overflow CVE-2026-4892 |
CWE-121 | High | 2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 12 more |
||
| #VU131144 - Improper input validation CVE-2026-4891 |
CWE-20 | Medium | 2.68-1ubuntu0.2+esm5, 2.90-0ubuntu0.16.04.1+esm3, 2.90-0ubuntu0.18.04.1+esm3, 2.90-0ubuntu0.20.04.1+esm2, 2.90-0ubuntu0.22.04.3, 2.90-2ubuntu0.3, 2.91-1ubuntu0.2, 2.92-1ubuntu0.2 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 12 more |
||
| #VU63013 - Use After Free CVE-2022-0934 |
CWE-416 | Medium | 2.79-1ubuntu0.6, 2.80-1.1ubuntu1.5, 2.85-1ubuntu2.1, 2.86-1.1ubuntu0.1 | 11.05.2022 |
SB2022051113 SB2022051132 SB2022092222 and 19 more |
||
| #VU52065 - Insufficient Verification of Data Authenticity CVE-2021-3448 |
CWE-345 | Medium | 2.79-1ubuntu0.4, 2.80-1.1ubuntu1.4, 2.82-1ubuntu1.3, 2.84-1ubuntu2.1, 2.791ubuntu0.16.04.1+esm1 | 13.04.2021 |
SB2021041305 SB2021041306 SB2021052607 and 10 more |
||
| #VU49846 - Heap-based Buffer Overflow CVE-2020-25687 |
CWE-122 | Medium | 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 | 20.01.2021 |
SB2021012070 SB20210120109 SB20210120122 and 12 more |
||
| #VU49845 - Insufficient Verification of Data Authenticity CVE-2020-25686 |
CWE-345 | Low | 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 | 20.01.2021 |
SB2021012070 SB20210120108 SB20210120122 and 27 more |
||
| #VU49844 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-25685 |
CWE-327 | Low | 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 | 20.01.2021 |
SB2021012070 SB20210120107 SB20210120122 and 27 more |
||
| #VU49843 - Insufficient Verification of Data Authenticity CVE-2020-25684 |
CWE-345 | Low | 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 | 20.01.2021 |
SB2021012070 SB20210120106 SB20210120122 and 27 more |
||
| #VU49842 - Heap-based Buffer Overflow CVE-2020-25683 |
CWE-122 | Medium | 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 | 20.01.2021 |
SB2021012070 SB20210120105 SB20210120122 and 12 more |
||
| #VU49841 - Heap-based Buffer Overflow CVE-2020-25682 |
CWE-122 | High | 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 | 20.01.2021 |
SB2021012070 SB20210120104 SB20210120122 and 14 more |
||
| #VU49840 - Heap-based Buffer Overflow CVE-2020-25681 |
CWE-122 | High | 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 | 20.01.2021 |
SB2021012070 SB20210120103 SB20210120122 and 14 more |
||
| #VU31907 - Resource exhaustion CVE-2019-14834 |
CWE-400 | Low | 2.68-1ubuntu0.2+esm3, 2.75-1ubuntu0.16.04.7, 2.75-1ubuntu0.16.04.8, 2.79-1ubuntu0.2, 2.79-1ubuntu0.3, 2.80-1.1ubuntu1.2, 2.80-1.1ubuntu1.3, 2.82-1ubuntu1.1, 2.82-1ubuntu1.2 | 07.01.2020 |
SB2019121131 SB2019121940 SB2020093042 and 7 more |
||
| #VU19919 - Out-of-bounds read CVE-2019-14513 |
CWE-125 | Medium | 2.75-1ubuntu0.16.04.10 | 02.08.2019 |
SB2019080205 SB2017080115 SB2021042216 |
||
| #VU33708 - Improper input validation CVE-2017-15107 |
CWE-20 | Medium | 2.75-1ubuntu0.16.04.10 | 23.01.2018 |
SB2018012322 SB2019121131 SB2018040341 and 4 more |