Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
dnsmasq: Unpatched DNS replies cause system crash
published 4 months ago
Summary
A security update is available for dnsmasq, a popular DNS server software. If left unpatched, an attacker could potentially send a malicious DNS reply that causes the system to crash, leading to service disruption. To stay secure, update to the latest version of dnsmasq.
What to do
- Update suse dnsmasq to version 2.93-slfo.1.1_1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.1 | suse | dnsmasq |
< 2.93-slfo.1.1_1.1 Fix: upgrade to 2.93-slfo.1.1_1.1
|
Original advisory text
Security update for dnsmasq
This update for dnsmasq fixes the following issues
Update to 2.93:
- CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764).
Update to 2.93:
- CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202622454-1/ Vendor Advisory
- https://bugzilla.suse.com/1268764 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-12725 URL
- https://www.suse.com/security/cve/CVE-2026-2291 URL
- https://www.suse.com/security/cve/CVE-2026-6507 URL
Timeline
Published30 Jun 2026
Updated4 Jul 2026
First seen4 Jul 2026
Sources
SUSE-SU-2026:22454-1 · OSV
Track software like this
Free during beta