Known vulnerabilities in Dnsmasq

Vendor: GNU
Software: Dnsmasq
Software CPE: cpe:2.3:a:gnu:dnsmasq:*:*:*:*:*:*:*:*
Total vulnerabilities: 33
Public exploits: 10
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Dnsmasq Dnsmasq is affected by 33 known vulnerabilities: 5 high, 24 medium, 4 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131139 - Out-of-bounds write
CVE-2026-2291
CWE-787 Medium
No
No
2.92 12.05.2026 SB2026051245
SB20260513103
SB20260513104
and 14 more
#VU131140 - Improper input validation
CVE-2026-4890
CWE-20 Medium
No
No
2.92 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU131141 - Out-of-bounds read
CVE-2026-5172
CWE-125 Medium
No
No
2.92 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 5 more
#VU131142 - Improper input validation
CVE-2026-4893
CWE-20 Medium
No
No
2.92 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU131143 - Stack-based buffer overflow
CVE-2026-4892
CWE-121 High
No
No
2.92 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU131144 - Improper input validation
CVE-2026-4891
CWE-20 Medium
No
No
2.92 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU94783 - Integer overflow
CVE-2023-49441
CWE-190 Medium
No
No
2.90 26.07.2024 SB2023042040
SB2024072675
SB2024072676
and 1 more
#VU110638 - Origin Validation Error
CVE-2005-0877
CWE-346 Medium
No
No
2.21 08.02.2024 SB2024020887
#VU75389 - Resource exhaustion
CVE-2023-28450
CWE-400 Medium
No
No
2.90 20.04.2023 SB2023042040
SB2023042041
SB2023042042
and 30 more
#VU110637 - Improper input validation
CVE-2013-0198
CWE-20 Medium
No
No
2.66 13.02.2023 SB2023021352
SB2014062515
#VU63013 - Use After Free
CVE-2022-0934
CWE-416 Medium
No
No
2.87 11.05.2022 SB2022051113
SB2022051132
SB2022092222
and 19 more
#VU52065 - Insufficient Verification of Data Authenticity
CVE-2021-3448
CWE-345 Medium
No
No
2.85 13.04.2021 SB2021041305
SB2021041306
SB2021052607
and 10 more
#VU49846 - Heap-based Buffer Overflow
CVE-2020-25687
CWE-122 Medium
No
No
2.83 20.01.2021 SB2021012070
SB20210120109
SB20210120122
and 12 more
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686
CWE-345 Low
Available
No
2.83 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685
CWE-327 Low
Available
No
2.83 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684
CWE-345 Low
Available
No
2.83 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more
#VU49842 - Heap-based Buffer Overflow
CVE-2020-25683
CWE-122 Medium
No
No
2.83 20.01.2021 SB2021012070
SB20210120105
SB20210120122
and 12 more
#VU49841 - Heap-based Buffer Overflow
CVE-2020-25682
CWE-122 High
No
No
2.83 20.01.2021 SB2021012070
SB20210120104
SB20210120122
and 14 more
#VU49840 - Heap-based Buffer Overflow
CVE-2020-25681
CWE-122 High
No
No
2.83 20.01.2021 SB2021012070
SB20210120103
SB20210120122
and 14 more
#VU19919 - Out-of-bounds read
CVE-2019-14513
CWE-125 Medium
No
No
2.76 02.08.2019 SB2019080205
SB2017080115
SB2021042216


Showing elements 1 - 20 out of 33