CVE-2026-12725

Description

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Traduire en français

Produits concernés

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Red Hat OpenShift Container Platform 4
• Redhat openshift container platform
• Redhat enterprise linux
• Thekelleys dnsmasq

Scores CVSS

Faiblesses (CWE)

• CWE-122

Références

• https://access.redhat.com/security/cve/CVE-2026-12725 MitigationVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2490763 Issue TrackingVendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories