Known vulnerabilities in Dnsmasq - page 2

Vendor: GNU
Software: Dnsmasq
Software CPE: cpe:2.3:a:gnu:dnsmasq:*:*:*:*:*:*:*:*
Total vulnerabilities: 33
Public exploits: 10
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Dnsmasq Dnsmasq is affected by 33 known vulnerabilities: 5 high, 24 medium, 4 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110635 - Improper input validation
CVE-2012-3411
CWE-20 Medium
No
No
2.63 08.06.2025 SB2013030506
SB2014062515
#VU110634 - NULL Pointer Dereference
CVE-2009-2958
CWE-476 Medium
Available
No
2.50 08.06.2025 SB2009083102
SB2009092001
#VU110633 - Heap-based Buffer Overflow
CVE-2009-2957
CWE-122 High
No
No
2.50 08.06.2025 SB2009083102
SB2009092001
#VU33708 - Improper input validation
CVE-2017-15107
CWE-20 Medium
No
No
- 23.01.2018 SB2018012322
SB2019121131
SB2018040341
and 4 more
#VU8666 - Memory corruption
CVE-2017-13704
CWE-119 Medium
No
No
- 03.10.2017 SB2017100301
SB2017100407
SB2017112901
and 3 more
#VU8665 - Memory corruption
CVE-2017-14496
CWE-119 Medium
Available
No
- 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8664 - Resource exhaustion
CVE-2017-14495
CWE-400 Medium
Available
No
- 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8663 - Missing release of memory after effective lifetime
CVE-2017-14494
CWE-401 Low
Available
No
- 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8662 - Heap-based Buffer Overflow
CVE-2017-14493
CWE-122 Medium
Available
No
- 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8661 - Heap-based Buffer Overflow
CVE-2017-14492
CWE-122 Medium
Available
No
- 03.10.2017 SB2017100301
SB2017100302
SB2017100304
and 17 more
#VU8660 - Heap-based Buffer Overflow
CVE-2017-14491
CWE-122 High
Available
No
- 02.10.2017 SB2017100301
SB2017100302
SB2017100304
and 24 more
#VU32274 - Improper input validation
CVE-2015-8899
CWE-20 Medium
No
No
2.76 30.06.2016 SB2016063013
SB2017010306
SB2016122312
and 7 more
#VU110636 - Improper input validation
CVE-2008-3214
CWE-20 Medium
No
No
2.26 18.07.2008 SB2008071801


Showing elements 21 - 40 out of 33