VULNERABILITY INTELLIGENCE

CVE-2026-12725

CVSS score5.9 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2026-06-22
Last modified2026-08-31
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Weakness classification

  • secalert@redhat.com: CWE-122

Primary references