CVE-2026-4891
Medium · 5.3CVSS
5.3
EPSS
0.8%
Published
May 11, 2026
CISA due date
—
The record
A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | dnsmasq | 0 | 2.92rel2-1.1 |
Related vulnerabilities
- CVE-2026-12969 An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in… Also affects dnsmasq
- CVE-2026-12725 A heap-based buffer overflow was found in dnsmasq. Also affects dnsmasq
- CVE-2026-4892 A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq… Also affects dnsmasq
- CVE-2026-4890 A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote… Also affects dnsmasq
- CVE-2026-4893 An information disclosure vulnerability in dnsmasq allows remote attackers to bypass… Also affects dnsmasq
- CVE-2026-5172 A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger… Also affects dnsmasq
- CVE-2026-2291 dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing… Also affects dnsmasq
- CVE-2026-6507 A flaw was found in dnsmasq. Also affects dnsmasq