Known vulnerabilities in net-dns/dnsmasq

Known vulnerabilities in net-dns/dnsmasq

Vendor: Gentoo

Software: net-dns/dnsmasq

Software CPE: cpe:2.3:o:gentoo:net-dns_dnsmasq:*:*:*:*:*:gentoo_linux:*:*

Website:

Total vulnerabilities: 14

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU131139 - Out-of-bounds write CVE-2026-2291	CWE-787	Medium	No	No	2.66	12.05.2026	SB2026051245 SB20260513103 SB20260513104 and 14 more
#VU131140 - Improper input validation CVE-2026-4890	CWE-20	Medium	No	No	2.66	12.05.2026	SB2026051245 SB20260513126 SB2026051898 and 11 more
#VU131141 - Out-of-bounds read CVE-2026-5172	CWE-125	Medium	No	No	2.66	12.05.2026	SB2026051245 SB20260513126 SB2026051898 and 5 more
#VU131142 - Improper input validation CVE-2026-4893	CWE-20	Medium	No	No	2.66	12.05.2026	SB2026051245 SB20260513126 SB2026051898 and 11 more
#VU131143 - Stack-based buffer overflow CVE-2026-4892	CWE-121	High	No	No	2.66	12.05.2026	SB2026051245 SB20260513126 SB2026051898 and 11 more
#VU131144 - Improper input validation CVE-2026-4891	CWE-20	Medium	No	No	2.66	12.05.2026	SB2026051245 SB20260513126 SB2026051898 and 11 more
#VU110635 - Improper input validation CVE-2012-3411	CWE-20	Medium	No	No	2.66	08.06.2025	SB2013030506 SB2014062515
#VU110634 - NULL Pointer Dereference CVE-2009-2958	CWE-476	Medium	Available	No	2.5.0	08.06.2025	SB2009083102 SB2009092001
#VU110633 - Heap-based Buffer Overflow CVE-2009-2957	CWE-122	High	No	No	2.5.0	08.06.2025	SB2009083102 SB2009092001
#VU86378 - Resource exhaustion CVE-2023-50868	CWE-400	Medium	Available	No	2.90	13.02.2024	SB2024021325 SB2024021330 SB2024021329 and 143 more
#VU86377 - Resource exhaustion CVE-2023-50387	CWE-400	Medium	Available	No	2.90	13.02.2024	SB2024021325 SB2024021330 SB2024021329 and 145 more
#VU75389 - Resource exhaustion CVE-2023-28450	CWE-400	Medium	No	No	2.90	20.04.2023	SB2023042040 SB2023042041 SB2023042042 and 30 more
#VU110637 - Improper input validation CVE-2013-0198	CWE-20	Medium	No	No	2.66	13.02.2023	SB2023021352 SB2014062515
#VU63013 - Use After Free CVE-2022-0934	CWE-416	Medium	No	No	2.90	11.05.2022	SB2022051113 SB2022051132 SB2022092222 and 19 more