CVEvulnerability

CVE-2026-12725

5.9 MEDIUM Published 2026-06-22 Modified 2026-08-31 Official page ↗
Status
Analyzed
Published
2026-06-22
Last modified
2026-08-31
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-122

Description

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Affected configurations

• redhat openshift container platform (>= 4.0 <= 4.22.1) • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • thekelleys dnsmasq (< 2.93)

Related

Weakness · CWE (1)

  • CWE-122 Heap-based Buffer Overflow weakness

References