Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-12725 →

DEBIAN-CVE-2026-12725

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.91-1+deb13u2"}]}]

Debian:14 dnsmasq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.93-1"}]}]

Références

advisory security-tracker.debian.org