CVE-2026-4891

Name
CVE-2026-4891
Description
A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cret@cert.org https://thekelleys.org.uk/dnsmasq/
cret@cert.org https://www.kb.cert.org/vuls/id/471747
cret@cert.org https://github.com/NixOS/nixpkgs/pull/519082
cret@cert.org https://github.com/NixOS/nixpkgs/pull/519093
cret@cert.org https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
cret@cert.org https://thekelleys.org.uk/dnsmasq/CVE/
cret@cert.org https://github.com/pi-hole/FTL/releases/tag/v6.6.2
0b0ca135-0b70-47e7-9f44-1890c2a1c46c https://access.redhat.com/errata/RHSA-2026:19158
0b0ca135-0b70-47e7-9f44-1890c2a1c46c https://access.redhat.com/errata/RHSA-2026:19373
0b0ca135-0b70-47e7-9f44-1890c2a1c46c https://access.redhat.com/errata/RHSA-2026:20589
0b0ca135-0b70-47e7-9f44-1890c2a1c46c https://access.redhat.com/security/cve/CVE-2026-4891
0b0ca135-0b70-47e7-9f44-1890c2a1c46c https://bugzilla.redhat.com/show_bug.cgi?id=2458517
0b0ca135-0b70-47e7-9f44-1890c2a1c46c https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4891.json
0b0ca135-0b70-47e7-9f44-1890c2a1c46c https://access.redhat.com/errata/RHSA-2026:34508
0b0ca135-0b70-47e7-9f44-1890c2a1c46c https://access.redhat.com/errata/RHSA-2026:40762

Match rules

CPE URI Source package Min version Max version

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
dnsmasq edge-main 2.92_p2-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
dnsmasq 3.24-main 2.92_p2-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
dnsmasq 3.23-main 2.91-r1 Natanael Copa <ncopa@alpinelinux.org> fixed
dnsmasq 3.22-main 2.91-r1 Natanael Copa <ncopa@alpinelinux.org> fixed