PT-2026-39699

CVE-2026-4891

·

Published

2026-05-09

·

Updated

2026-10-24

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions dnsmasq (affected versions not specified)
Description A heap-based out-of-bounds read in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service by sending a crafted DNS packet. A heap-based out-of-bounds read occurs when a program reads data past the end of the allocated memory on the heap, which can lead to crashes or information disclosure.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2026:19158
ALSA-2026:19373
ALSA-2026:20589
AZL-86757
CLEANSTART-2026-BB03261
CLEANSTART-2026-KY78316
CLSA-2026-1792817189
CLSA-2026-1792817408
OESA-2026-2435
OESA-2026-2436
OESA-2026-2437
OESA-2026-2438
OESA-2026-2509
OPENSUSE-SU-2026:10821-1
OPENSUSE-SU-2026:20748-1
RHSA-2026:19158
RHSA-2026:19373
RHSA-2026:34508
SUSE-SU-2026:1934-1
SUSE-SU-2026:21640-1
SUSE-SU-2026:21677-1
SUSE-SU-2026:21733-1
SUSE-SU-2026:21788-1
SUSE-SU-2026:2458-1
USN-8268-1
Found an issue in the description? Have something to add? Feel free to write us 👾