HarborGuard / CVE
Back to search
HIGHCVE-2026-2291Published Modified CNA certcc

CVE-2026-2291: CVE-2026-2291

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

Metrics

CVSS v3.1
7.3
Severity
HIGH
Fixed in
2.92rel2
Affected Products
1

Fix available

2.92rel2
Affected packages
  • dnsmasq / dnsmasq
    < 2.92rel2 (from 0)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References