> CVE-2026-5172

« BACK_TO_HOME
PUBLISHED
2026-05-11 18:16
MODIFIED
2026-05-11 18:16
EPSS (Prob. Exploit)
2.68%
Top 14.2%
DATA SOURCES:
NVD 🔗 2026-05-11 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-11-02 MSRC 🔗 2026-11-02

> DESCRIPTION

A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: dnsmasq security update
An update for dnsmasq is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...
Red Hat Security Advisory: dnsmasq security, bug fix, and enhancement update
An update for dnsmasq is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vul...

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

CVE-2026-5172

AFFECTED PACKAGES:
Unknown / Unknown
122 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
11/05/2026 18:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES

https://thekelleys.org.uk/dnsmasq/
https://www.kb.cert.org/vuls/id/471747
« BACK_TO_HOME