CVE Catalog
CVE-2026-4890
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk7.24%
94th percentile - higher than 94% of all known CVEs
Summary
The DNSSEC validation in dnsmasq has a denial of service (DoS) vulnerability. A remote attacker can send a crafted DNS packet, causing the service to crash.
Risk Assessment
DNS service disruption, potentially preventing name resolution in the network.
Recommendation
Update dnsmasq to a patched version.
Original NVD description (English source)
A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.