DN
Product
Dnsmasq
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 13Medium 6Low 4
Watch
Add Dnsmasq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25682 | 8.1 | Jan 20 | A flaw was found in dnsmasq before 2.83 Affected: before 2.83 |
| CVE-2020-25681 | 8.1 | Jan 20 | A flaw was found in dnsmasq before version 2.83 Affected: before 2.83 |
| CVE-2023-49441 | 7.5 | Jun 6 | dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query Affected: 2.9 |
| CVE-2023-50387 | 7.5 | Feb 14 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more… Affected: before 2.90 |
| CVE-2023-28450 | 7.5 | Mar 15 | An issue was discovered in Dnsmasq before 2.90 Affected: before 2.90 |
| CVE-2022-0934 | 7.5 | Aug 29 | A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq Affected: before 2.87 |
| CVE-2019-14513 | 7.5 | Aug 1 | Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for… Affected: before 2.76 |
| CVE-2017-15107 | 7.5 | Jan 23 | A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78 Affected: through 2.78 |
| CVE-2017-14496 | 7.5 | Oct 3 | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause… Affected: through 2.77 |
| CVE-2017-14495 | 7.5 | Oct 3 | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption)… Affected: through 2.77 |
| CVE-2017-13704 | 7.5 | Oct 3 | In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value Affected: through 2.77 |
| CVE-2015-8899 | 7.5 | Jun 30 | Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally Affected: through 2.75 |
| CVE-2005-0877 | 7.5 | May 2 | Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq Affected: before 2.21 |
Showing 13