Known vulnerabilities in dnsmasq (Red Hat package)
Vendor:
Red Hat Inc.
Software:
dnsmasq (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:dnsmasq_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
20
Public exploits:
6
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.85-17.el9_6.1
2.79-36.el8_10
2.85-18.el9_8.1
2.45-2.el5_11.1
2.45-2.el5_9.1
2.85-6.el9_2.4
2.45-1.el5_2.1
2.79-11.el8_2.3
2.79-15.el8_4.2
2.79-21.el8_6.5
2.79-26.el8_8.4
2.85-3.el9_0.1
2.85-6.el9_2.3
2.79-31.el8_9.2
2.85-14.el9_3.1
2.79-31.el8
2.85-14.el9
2.79-19.el8
2.79-11.el8
2.85-5.el9
2.79-24.el8
2.66-21.el7_3.3
2.66-14.el7_2.3
2.76-7.el7_6.2
2.76-16.el7_9.1
2.79-13.el8_3.1
2.76-2.el7_4.3
2.76-10.el7_7.2
2.79-6.el8_1.1
2.79-11.el8_2.2
2.76-16.el7
2.76-2.el7
2.45-1.1.el5_3
2.76-10.el7_7
2.76-7.el7
2.76-5.el7
2.76-2.el7_4
2.66-21.el7
2.66-14.el7_1
2.66-13.el7_1
2.66-10.el7
2.48-18.el6_9
2.48-17.el6
2.48-16.el6_7
2.48-14.el6
2.48-5.el6
2.48-4.el6
2.48-13.el6
2.48-6.el6
Vulnerabilities (20)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131139 - Out-of-bounds write CVE-2026-2291 |
CWE-787 | Medium | 2.79-36.el8_10, 2.85-17.el9_6.1, 2.85-18.el9_8.1 | 12.05.2026 |
SB2026051245 SB20260513103 SB20260513104 and 13 more |
||
| #VU131140 - Improper input validation CVE-2026-4890 |
CWE-20 | Medium | 2.79-36.el8_10, 2.85-17.el9_6.1, 2.85-18.el9_8.1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 10 more |
||
| #VU131142 - Improper input validation CVE-2026-4893 |
CWE-20 | Medium | 2.79-36.el8_10, 2.85-17.el9_6.1, 2.85-18.el9_8.1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 10 more |
||
| #VU131143 - Stack-based buffer overflow CVE-2026-4892 |
CWE-121 | High | 2.79-36.el8_10, 2.85-17.el9_6.1, 2.85-18.el9_8.1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 10 more |
||
| #VU131144 - Improper input validation CVE-2026-4891 |
CWE-20 | Medium | 2.79-36.el8_10, 2.85-17.el9_6.1, 2.85-18.el9_8.1 | 12.05.2026 |
SB2026051245 SB20260513126 SB2026051898 and 10 more |
||
| #VU86378 - Resource exhaustion CVE-2023-50868 |
CWE-400 | Medium | 2.79-11.el8_2.3, 2.79-15.el8_4.2, 2.79-21.el8_6.5, 2.79-26.el8_8.4, 2.79-31.el8_9.2, 2.85-3.el9_0.1, 2.85-6.el9_2.3, 2.85-14.el9_3.1 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 143 more |
||
| #VU86377 - Resource exhaustion CVE-2023-50387 |
CWE-400 | Medium | 2.79-11.el8_2.3, 2.79-15.el8_4.2, 2.79-21.el8_6.5, 2.79-26.el8_8.4, 2.79-31.el8_9.2, 2.85-3.el9_0.1, 2.85-6.el9_2.3, 2.85-14.el9_3.1 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 145 more |
||
| #VU75389 - Resource exhaustion CVE-2023-28450 |
CWE-400 | Medium | 2.79-21.el8_6.5, 2.79-26.el8_8.4, 2.79-31.el8, 2.85-6.el9_2.4, 2.85-14.el9 | 20.04.2023 |
SB2023042040 SB2023042041 SB2023042042 and 30 more |
||
| #VU63013 - Use After Free CVE-2022-0934 |
CWE-416 | Medium | 2.79-21.el8_6.5, 2.79-24.el8, 2.85-5.el9 | 11.05.2022 |
SB2022051113 SB2022051132 SB2022092222 and 19 more |
||
| #VU52065 - Insufficient Verification of Data Authenticity CVE-2021-3448 |
CWE-345 | Medium | 2.79-19.el8 | 13.04.2021 |
SB2021041305 SB2021041306 SB2021052607 and 10 more |
||
| #VU49846 - Heap-based Buffer Overflow CVE-2020-25687 |
CWE-122 | Medium | 2.79-6.el8_1.1, 2.79-11.el8_2.2, 2.79-13.el8_3.1 | 20.01.2021 |
SB2021012070 SB20210120109 SB20210120122 and 12 more |
||
| #VU49845 - Insufficient Verification of Data Authenticity CVE-2020-25686 |
CWE-345 | Low | 2.66-14.el7_2.3, 2.66-21.el7_3.3, 2.76-2.el7_4.3, 2.76-7.el7_6.2, 2.76-10.el7_7.2, 2.76-16.el7_9.1, 2.79-6.el8_1.1, 2.79-11.el8_2.2, 2.79-13.el8_3.1 | 20.01.2021 |
SB2021012070 SB20210120108 SB20210120122 and 27 more |
||
| #VU49844 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-25685 |
CWE-327 | Low | 2.66-14.el7_2.3, 2.66-21.el7_3.3, 2.76-2.el7_4.3, 2.76-7.el7_6.2, 2.76-10.el7_7.2, 2.76-16.el7_9.1, 2.79-6.el8_1.1, 2.79-11.el8_2.2, 2.79-13.el8_3.1 | 20.01.2021 |
SB2021012070 SB20210120107 SB20210120122 and 27 more |
||
| #VU49843 - Insufficient Verification of Data Authenticity CVE-2020-25684 |
CWE-345 | Low | 2.66-14.el7_2.3, 2.66-21.el7_3.3, 2.76-2.el7_4.3, 2.76-7.el7_6.2, 2.76-10.el7_7.2, 2.76-16.el7_9.1, 2.79-6.el8_1.1, 2.79-11.el8_2.2, 2.79-13.el8_3.1 | 20.01.2021 |
SB2021012070 SB20210120106 SB20210120122 and 27 more |
||
| #VU49842 - Heap-based Buffer Overflow CVE-2020-25683 |
CWE-122 | Medium | 2.79-6.el8_1.1, 2.79-11.el8_2.2, 2.79-13.el8_3.1 | 20.01.2021 |
SB2021012070 SB20210120105 SB20210120122 and 12 more |
||
| #VU49841 - Heap-based Buffer Overflow CVE-2020-25682 |
CWE-122 | High | 2.79-6.el8_1.1, 2.79-11.el8_2.2, 2.79-13.el8_3.1 | 20.01.2021 |
SB2021012070 SB20210120104 SB20210120122 and 14 more |
||
| #VU49840 - Heap-based Buffer Overflow CVE-2020-25681 |
CWE-122 | High | 2.79-6.el8_1.1, 2.79-11.el8_2.2, 2.79-13.el8_3.1 | 20.01.2021 |
SB2021012070 SB20210120103 SB20210120122 and 14 more |
||
| #VU31907 - Resource exhaustion CVE-2019-14834 |
CWE-400 | Low | 2.76-16.el7, 2.79-11.el8 | 07.01.2020 |
SB2019121131 SB2019121940 SB2020093042 and 7 more |
||
| #VU19919 - Out-of-bounds read CVE-2019-14513 |
CWE-125 | Medium | 2.76-2.el7 | 02.08.2019 |
SB2019080205 SB2017080115 SB2021042216 |
||
| #VU8660 - Heap-based Buffer Overflow CVE-2017-14491 |
CWE-122 | High | 2.45-2.el5_9.1, 2.45-2.el5_11.1 | 02.10.2017 |
SB2017100301 SB2017100302 SB2017100304 and 24 more |