CVE Catalog
CVE-2026-4891
MediumCVSS 5.3Exploitation Probability (EPSS)
Very high risk6.41%
93th percentile - higher than 93% of all known CVEs
Summary
A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
Risk Assessment
The risk involves potential disruption of DNS service, leading to network unavailability for users.
Recommendation
Update dnsmasq to a version that fixes this vulnerability and restrict access to the DNS server.
Original NVD description (English source)
A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.