Known vulnerabilities in dnsmasq (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:dnsmasq_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 13
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dnsmasq (Debian package) dnsmasq (Debian package) is affected by 13 known vulnerabilities: 3 high, 7 medium, 3 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131139 - Out-of-bounds write
CVE-2026-2291
CWE-787 Medium
No
No
2.90-4~deb12u2, 2.91-1+deb13u1 12.05.2026 SB2026051245
SB20260513103
SB20260513104
and 14 more
#VU131140 - Improper input validation
CVE-2026-4890
CWE-20 Medium
No
No
2.90-4~deb12u2, 2.91-1+deb13u1 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU131141 - Out-of-bounds read
CVE-2026-5172
CWE-125 Medium
No
No
2.90-4~deb12u2, 2.91-1+deb13u1 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 5 more
#VU131142 - Improper input validation
CVE-2026-4893
CWE-20 Medium
No
No
2.90-4~deb12u2, 2.91-1+deb13u1 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU131143 - Stack-based buffer overflow
CVE-2026-4892
CWE-121 High
No
No
2.90-4~deb12u2, 2.91-1+deb13u1 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU131144 - Improper input validation
CVE-2026-4891
CWE-20 Medium
No
No
2.90-4~deb12u2, 2.91-1+deb13u1 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU49846 - Heap-based Buffer Overflow
CVE-2020-25687
CWE-122 Medium
No
No
2.80-1+deb10u1 20.01.2021 SB2021012070
SB20210120109
SB20210120122
and 12 more
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686
CWE-345 Low
Available
No
2.80-1+deb10u1 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685
CWE-327 Low
Available
No
2.80-1+deb10u1 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684
CWE-345 Low
Available
No
2.80-1+deb10u1 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more
#VU49842 - Heap-based Buffer Overflow
CVE-2020-25683
CWE-122 Medium
No
No
2.80-1+deb10u1 20.01.2021 SB2021012070
SB20210120105
SB20210120122
and 12 more
#VU49841 - Heap-based Buffer Overflow
CVE-2020-25682
CWE-122 High
No
No
2.80-1+deb10u1 20.01.2021 SB2021012070
SB20210120104
SB20210120122
and 14 more
#VU49840 - Heap-based Buffer Overflow
CVE-2020-25681
CWE-122 High
No
No
2.80-1+deb10u1 20.01.2021 SB2021012070
SB20210120103
SB20210120122
and 14 more