CVE-2026-6507

The record

A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the `--dhcp-split-relay` option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).

Affected packages

Related vulnerabilities

• CVE-2026-12725 A heap-based buffer overflow was found in dnsmasq. Also affects dnsmasq
• CVE-2026-2291 dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing… Also affects dnsmasq
• CVE-2026-12969 An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in… Also affects dnsmasq
• CVE-2026-4892 A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq… Also affects dnsmasq
• CVE-2026-4890 A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote… Also affects dnsmasq
• CVE-2026-4891 A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows… Also affects dnsmasq
• CVE-2026-4893 An information disclosure vulnerability in dnsmasq allows remote attackers to bypass… Also affects dnsmasq
• CVE-2026-5172 A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger… Also affects dnsmasq