Known vulnerabilities in dnsmasq (Debian package)
Vendor:
Debian
Software:
dnsmasq (Debian package)
Software CPE:
cpe:2.3:o:debian:dnsmasq_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
13
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.91-1+deb13u1
2.90-4~deb12u2
2.76-5+deb9u3
2.80-1+deb10u3
2.81-4
2.83-1
2.84-1
2.84-1.1
2.84-1.2
2.85-1
2.85-1+deb11u1
2.86-1
2.86-1.1
2.87-1
2.87-1.1
2.88-1
2.89-1
2.90-1
2.90-2
2.90-3
2.90-4~deb12u1
2.90-4
2.90-5
2.90-6
2.90-7
2.91~test6-1
2.91~test9-1
2.91-1
2.80-1+deb10u1
2.82
2.82-1
2.33-1+b1
2.81
2.80
2.76
2.72
2.81-3
2.81-2
2.81-1
2.80-1.1
2.72-3+deb8u5
2.76-5+deb9u2
2.80-1
2.72-3+deb8u4
2.35-1+etch4
2.45-1~bpo40+1
2.45-1+lenny1
2.62-3+deb7u4
2.72-3+deb8u3
2.72-3.1
2.79-1
2.78-3
2.78-2
2.78-1
2.76-5+deb9u1
2.72-3+deb8u2
2.77-1
2.77-2
2.73-1
2.73-2
2.74-1
2.75-1
2.76-1
2.76-1.1
2.76-1.2
2.76-2
2.76-3
2.76-4
2.76-4.1
2.76-5
2.63-1
2.63-2
2.63-3
2.63-4
2.64-1
2.65-1
2.66-1
2.66-2
2.66-3
2.66-4
2.67-1
2.68-1
2.69-1
2.70-1
2.70-2
2.70-3
2.71-1
2.72-1
2.72-2
2.72-3
2.72-3+deb8u1
2.62-3+deb7u2
2.62-3+deb7u3
2.56-1
2.57-1
2.58-1
2.58-2
2.58-3
2.59-1
2.59-2
2.59-3
2.59-4
2.60-1
2.60-2
2.61-1
2.62-1
2.62-2
2.62-3
2.62-3+deb7u1
0.95-1
0.96-1
0.98-1
0.992-1
0.994-1
0.995-1
0.996-1
1.0-1
1.1-2
1.2-1
1.2-2
1.2-3
1.2-4
1.3-1
1.4-1
1.4-2
1.5-1
1.6-1
1.7-1
1.8-1
1.9-1
1.10-1
1.11-1
1.11-2
1.12-1
1.13-1
1.13-2
1.13-3
1.13-4
1.14-1
1.15-1
1.16-1
1.17-1
1.18-1
1.18-2
2.0-1
2.1-1
2.2-1
2.3-1
2.4-1
2.4-2
2.4-3
2.5-1
2.6-1
2.6-2
2.6-3
2.7-1
2.7-2
2.8-1
2.9-1
2.9-2
2.10-1
2.11-1
2.12-1
2.13-1
2.14-1
2.15-1
2.16-1
2.16-2
2.17-1
2.18-1
2.18-2
2.19-1
2.20-1
2.21-1
2.22-1
2.22-2
2.23-1
2.24-1
2.25-1
2.26-1
2.27-1
2.28-1
2.29-1
2.30-1
2.31-1
2.32-1
2.32-2
2.33-1
2.34-1
2.35-1
2.36-1
2.37-1
2.38-1
2.39-1
2.40-1
2.41-1
2.41-2
2.42-1
2.42-2
2.42-3
2.42-4
2.43-1
2.44-1
2.45-1
2.46-1
2.47-1
2.47-2
2.47-3
2.48-1
2.48-2
2.49-1
2.50-1
2.51-1
2.52-1
2.53-1
2.55-1
2.55-2
2.55-2+deb6u1
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131139 - Out-of-bounds write CVE-2026-2291 |
CWE-787 | Medium | 2.90-4~deb12u2, 2.91-1+deb13u1 | 12.05.2026 |
SB2026051245 SB20260513103 SB20260513104 and 14 more |
||
| #VU131140 - Improper input validation CVE-2026-4890 |
CWE-20 | Medium | 2.90-4~deb12u2, 2.91-1+deb13u1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 11 more |
||
| #VU131141 - Out-of-bounds read CVE-2026-5172 |
CWE-125 | Medium | 2.90-4~deb12u2, 2.91-1+deb13u1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 5 more |
||
| #VU131142 - Improper input validation CVE-2026-4893 |
CWE-20 | Medium | 2.90-4~deb12u2, 2.91-1+deb13u1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 11 more |
||
| #VU131143 - Stack-based buffer overflow CVE-2026-4892 |
CWE-121 | High | 2.90-4~deb12u2, 2.91-1+deb13u1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 11 more |
||
| #VU131144 - Improper input validation CVE-2026-4891 |
CWE-20 | Medium | 2.90-4~deb12u2, 2.91-1+deb13u1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 11 more |
||
| #VU49846 - Heap-based Buffer Overflow CVE-2020-25687 |
CWE-122 | Medium | 2.80-1+deb10u1 | 20.01.2021 |
SB2021012070 SB20210120109 SB20210120122 and 12 more |
||
| #VU49845 - Insufficient Verification of Data Authenticity CVE-2020-25686 |
CWE-345 | Low | 2.80-1+deb10u1 | 20.01.2021 |
SB2021012070 SB20210120108 SB20210120122 and 27 more |
||
| #VU49844 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-25685 |
CWE-327 | Low | 2.80-1+deb10u1 | 20.01.2021 |
SB2021012070 SB20210120107 SB20210120122 and 27 more |
||
| #VU49843 - Insufficient Verification of Data Authenticity CVE-2020-25684 |
CWE-345 | Low | 2.80-1+deb10u1 | 20.01.2021 |
SB2021012070 SB20210120106 SB20210120122 and 27 more |
||
| #VU49842 - Heap-based Buffer Overflow CVE-2020-25683 |
CWE-122 | Medium | 2.80-1+deb10u1 | 20.01.2021 |
SB2021012070 SB20210120105 SB20210120122 and 12 more |
||
| #VU49841 - Heap-based Buffer Overflow CVE-2020-25682 |
CWE-122 | High | 2.80-1+deb10u1 | 20.01.2021 |
SB2021012070 SB20210120104 SB20210120122 and 14 more |
||
| #VU49840 - Heap-based Buffer Overflow CVE-2020-25681 |
CWE-122 | High | 2.80-1+deb10u1 | 20.01.2021 |
SB2021012070 SB20210120103 SB20210120122 and 14 more |