GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Vulnerability from cleanstart
Published
2026-09-04 00:59
Modified
2026-09-03 10:27
Summary
dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-...
Details

Multiple security vulnerabilities affect the dnsmasq package. dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. See references for individual vulnerability details.

References
https://github.com/cleanstart-dev/cleanstart-secu… ADVISORY
https://osv.dev/vulnerability/CVE-2017-13704 WEB
https://osv.dev/vulnerability/CVE-2017-14491 WEB
https://osv.dev/vulnerability/CVE-2017-14492 WEB
https://osv.dev/vulnerability/CVE-2017-14493 WEB
https://osv.dev/vulnerability/CVE-2017-14494 WEB
https://osv.dev/vulnerability/CVE-2017-14495 WEB
https://osv.dev/vulnerability/CVE-2017-14496 WEB
https://osv.dev/vulnerability/CVE-2017-15107 WEB
https://osv.dev/vulnerability/CVE-2019-14834 WEB
https://osv.dev/vulnerability/CVE-2020-25681 WEB
https://osv.dev/vulnerability/CVE-2020-25682 WEB
https://osv.dev/vulnerability/CVE-2020-25683 WEB
https://osv.dev/vulnerability/CVE-2020-25684 WEB
https://osv.dev/vulnerability/CVE-2020-25685 WEB
https://osv.dev/vulnerability/CVE-2020-25686 WEB
https://osv.dev/vulnerability/CVE-2020-25687 WEB
https://osv.dev/vulnerability/CVE-2021-3448 WEB
https://osv.dev/vulnerability/CVE-2022-0934 WEB
https://osv.dev/vulnerability/CVE-2023-28450 WEB
https://osv.dev/vulnerability/CVE-2023-50387 WEB
https://osv.dev/vulnerability/CVE-2023-50868 WEB
https://osv.dev/vulnerability/CVE-2026-2291 WEB
https://osv.dev/vulnerability/CVE-2026-4890 WEB
https://osv.dev/vulnerability/CVE-2026-4891 WEB
https://osv.dev/vulnerability/CVE-2026-4892 WEB
https://osv.dev/vulnerability/CVE-2026-4893 WEB
https://osv.dev/vulnerability/CVE-2026-5172 WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-13704 WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-14491 WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-14492 WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-14493 WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-14494 WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-14495 WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-14496 WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-15107 WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-14834 WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25681 WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25682 WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25683 WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25684 WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25685 WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25686 WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25687 WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-3448 WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-0934 WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-28450 WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-50387 WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-50868 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-2291 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-4890 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-4891 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-4892 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-4893 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-5172 WEB

{
  "affected": [
    {
      "package": {
        "ecosystem": "CleanStart",
        "name": "dnsmasq"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.92_p2-r0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [],
  "database_specific": {},
  "details": "Multiple security vulnerabilities affect the dnsmasq package. dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. See references for individual vulnerability details.",
  "id": "CLEANSTART-2026-KY78316",
  "modified": "2026-09-03T10:27:17Z",
  "published": "2026-09-04T00:59:50.930698Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KY78316.json"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2017-13704"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2017-14491"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2017-14492"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2017-14493"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2017-14494"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2017-14495"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2017-14496"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2017-15107"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2019-14834"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2020-25681"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2020-25682"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2020-25683"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2020-25684"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2020-25685"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2020-25686"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2020-25687"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2021-3448"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2022-0934"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2023-28450"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2023-50387"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2023-50868"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-2291"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-4890"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-4891"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-4892"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-4893"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-5172"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13704"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14492"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14493"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14494"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14495"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14496"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15107"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14834"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25681"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25682"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25683"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25684"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25685"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25686"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25687"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3448"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0934"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28450"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50387"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50868"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2291"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4890"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4891"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4892"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4893"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5172"
    }
  ],
  "related": [],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-...",
  "upstream": [
    "CVE-2017-13704",
    "CVE-2017-14491",
    "CVE-2017-14492",
    "CVE-2017-14493",
    "CVE-2017-14494",
    "CVE-2017-14495",
    "CVE-2017-14496",
    "CVE-2017-15107",
    "CVE-2019-14834",
    "CVE-2020-25681",
    "CVE-2020-25682",
    "CVE-2020-25683",
    "CVE-2020-25684",
    "CVE-2020-25685",
    "CVE-2020-25686",
    "CVE-2020-25687",
    "CVE-2021-3448",
    "CVE-2022-0934",
    "CVE-2023-28450",
    "CVE-2023-50387",
    "CVE-2023-50868",
    "CVE-2026-2291",
    "CVE-2026-4890",
    "CVE-2026-4891",
    "CVE-2026-4892",
    "CVE-2026-4893",
    "CVE-2026-5172"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…