TH
Vendor
Thekelleys
39
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12969 | DN Dnsmasq Thekelleys | 5.3 | Jun 23 | Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation |
| CVE-2026-12725 | DN Dnsmasq Thekelleys | 5.9 | Jun 22 | Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies |
| CVE-2023-49441 | DN Dnsmasq Thekelleys | 7.5 | Jun 6 | dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query |
| CVE-2023-50387 | DN Dnsmasq Thekelleys | 7.5 | Feb 14 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more… |
| CVE-2023-28450 | DN Dnsmasq Thekelleys | 7.5 | Mar 15 | An issue was discovered in Dnsmasq before 2.90 |
| CVE-2022-0934 | DN Dnsmasq Thekelleys | 7.5 | Aug 29 | A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq |
| CVE-2021-45957 | DN Dnsmasq Thekelleys | 9.8 | Jan 1 | Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c) |
| CVE-2021-45956 | DN Dnsmasq Thekelleys | 9.8 | Jan 1 | Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply) |
| CVE-2021-45955 | DN Dnsmasq Thekelleys | 9.8 | Jan 1 | Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header… |
| CVE-2021-45954 | DN Dnsmasq Thekelleys | 9.8 | Jan 1 | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth) |
| CVE-2021-45953 | DN Dnsmasq Thekelleys | 9.8 | Jan 1 | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c) |
| CVE-2021-45952 | DN Dnsmasq Thekelleys | 9.8 | Jan 1 | Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp) |
| CVE-2021-45951 | DN Dnsmasq Thekelleys | 9.8 | Jan 1 | Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard) |
| CVE-2021-3448 | DN Dnsmasq Thekelleys | 4.0 | Apr 8 | A flaw was found in dnsmasq in versions before 2.85 |
| CVE-2020-25687 | DN Dnsmasq Thekelleys | 5.9 | Jan 20 | A flaw was found in dnsmasq before version 2.83 |
| CVE-2020-25686 | DN Dnsmasq Thekelleys | 3.7 | Jan 20 | A flaw was found in dnsmasq before version 2.83 |
| CVE-2020-25682 | DN Dnsmasq Thekelleys | 8.1 | Jan 20 | A flaw was found in dnsmasq before 2.83 |
| CVE-2020-25681 | DN Dnsmasq Thekelleys | 8.1 | Jan 20 | A flaw was found in dnsmasq before version 2.83 |
| CVE-2020-25685 | DN Dnsmasq Thekelleys | 3.7 | Jan 20 | A flaw was found in dnsmasq before version 2.83 |
| CVE-2020-25684 | DN Dnsmasq Thekelleys | 3.7 | Jan 20 | A flaw was found in dnsmasq before version 2.83 |
| CVE-2020-25683 | DN Dnsmasq Thekelleys | 5.9 | Jan 20 | A flaw was found in dnsmasq before version 2.83 |
| CVE-2019-14834 | DN Dnsmasq Thekelleys | 3.7 | Jan 7 | A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving… |
| CVE-2019-14513 | DN Dnsmasq Thekelleys | 7.5 | Aug 1 | Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for… |
| CVE-2017-15107 | DN Dnsmasq Thekelleys | 7.5 | Jan 23 | A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78 |
| CVE-2017-14491 | DN Dnsmasq Thekelleys | 9.8 | Oct 4 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response |
| CVE-2017-14496 | DN Dnsmasq Thekelleys | 7.5 | Oct 3 | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause… |
| CVE-2017-14495 | DN Dnsmasq Thekelleys | 7.5 | Oct 3 | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption)… |
| CVE-2017-14494 | DN Dnsmasq Thekelleys | 5.9 | Oct 3 | dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests |
| CVE-2017-14493 | DN Dnsmasq Thekelleys | 9.8 | Oct 3 | Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request |
| CVE-2017-14492 | DN Dnsmasq Thekelleys | 9.8 | Oct 3 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement… |
| CVE-2017-13704 | DN Dnsmasq Thekelleys | 7.5 | Oct 3 | In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value |
| CVE-2015-8899 | DN Dnsmasq Thekelleys | 7.5 | Jun 30 | Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally |
| CVE-2015-3294 | DN Dnsmasq Thekelleys | – | May 8 | The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and… |
| CVE-2013-0198 | DN Dnsmasq Thekelleys | – | Mar 5 | Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers to cause a denial of service… |
| CVE-2012-3411 | DN Dnsmasq Thekelleys | – | Mar 5 | Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service… |
| CVE-2009-2958 | DN Dnsmasq Thekelleys | – | Sep 2 | The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon… |
| CVE-2009-2957 | DN Dnsmasq Thekelleys | – | Sep 2 | Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a… |
| CVE-2008-3214 | DN Dnsmasq Thekelleys | – | Jul 18 | dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in… |
| CVE-2005-0877 | DN Dnsmasq Thekelleys | 7.5 | May 2 | Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq |