Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
dnsmasq: Crash or data exposure from malicious DNS responses
published 3 months ago
Summary
The dnsmasq software is used to manage network DNS settings. A malicious DNS response could cause the software to crash or expose sensitive data. Update the dnsmasq software to the latest version to fix these security issues.
What to do
- Update mageia dnsmasq to version 2.93-1.mga10.
- Update mageia dnsmasq to version 2.93-1.mga9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Mageia:10 | mageia | dnsmasq |
< 2.93-1.mga10 Fix: upgrade to 2.93-1.mga10
|
| Mageia:9 | mageia | dnsmasq |
< 2.93-1.mga9 Fix: upgrade to 2.93-1.mga9
|
Original advisory text
Updated dnsmasq packages fix security vulnerabilities
The updated dnsmasq packages fix multiple security issues:
A heap-based buffer overflow was found in dnsmasq. When DNSSEC
validation and query logging are both enabled, logging of DS or DNSKEY
replies containing unsupported algorithm or digest types can cause
dnsmasq to write past the end of an internal logging buffer.
A remote attacker able to supply such a DNS response may crash the
dnsmasq process, resulting in denial of service. (CVE-2026-12725)
An out-of-bounds read vulnerability exists in dnsmasq's find_soa()
function in src/rfc1035.c. When parsing NS section records,
extract_name() is called with extrabytes=0, failing to validate that 10
additional bytes exist for fixed-length DNS record fields. A remote
attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN
response to cause a 10-byte heap out-of-bounds read, potentially
accessing stale data from prior transactions. (CVE-2026-12969)
A heap-based buffer overflow was found in dnsmasq. When DNSSEC
validation and query logging are both enabled, logging of DS or DNSKEY
replies containing unsupported algorithm or digest types can cause
dnsmasq to write past the end of an internal logging buffer.
A remote attacker able to supply such a DNS response may crash the
dnsmasq process, resulting in denial of service. (CVE-2026-12725)
An out-of-bounds read vulnerability exists in dnsmasq's find_soa()
function in src/rfc1035.c. When parsing NS section records,
extract_name() is called with extrabytes=0, failing to validate that 10
additional bytes exist for fixed-length DNS record fields. A remote
attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN
response to cause a 10-byte heap out-of-bounds read, potentially
accessing stale data from prior transactions. (CVE-2026-12969)
References
- https://advisories.mageia.org/MGASA-2026-0288.html Vendor Advisory
- https://bugs.mageia.org/show_bug.cgi?id=35935 Third Party Advisory
- https://app.opencve.io/cve/CVE-2026-12725 Vendor Advisory
- https://app.opencve.io/cve/CVE-2026-12969 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8542-1 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2490763 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2491663 Third Party Advisory
- https://thekelleys.org.uk/dnsmasq/CHANGELOG URL
Timeline
Published23 Jul 2026
Updated23 Jul 2026
First seen23 Jul 2026
Sources
MGASA-2026-0288 · OSV
Track software like this
Free during beta