dnsmasq

Direct Vulnerabilities

Known vulnerabilities in the dnsmasq package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Out-of-bounds Read

<2.91-1+deb13u2
  • M
Heap-based Buffer Overflow

<2.91-1+deb13u2
  • H
CVE-2023-50868

<2.90-4~deb12u1
  • H
Allocation of Resources Without Limits or Throttling

<2.90-4~deb12u1
  • H
Integer Overflow or Wraparound

<2.90-1
  • H
CVE-2023-28450

<2.90-4~deb12u1
  • M
Stack-based Buffer Overflow

<2.80-1
  • M
Heap-based Buffer Overflow

<2.83-1
  • L
Improperly Implemented Security Check for Standard

<2.83-1
  • L
Inadequate Encryption Strength

<2.83-1
  • L
CVE-2020-25684

<2.83-1
  • M
Heap-based Buffer Overflow

<2.83-1
  • H
Heap-based Buffer Overflow

<2.83-1
  • H
Heap-based Buffer Overflow

<2.83-1
  • M
CVE-2020-14312

<2.69-1
  • L
Allocation of Resources Without Limits or Throttling

<2.81-1
  • H
Out-of-bounds Read

<2.76-1
  • H
CVE-2017-15107

<2.79-1
  • H
Integer Underflow

<2.78-1
  • H
Missing Release of Resource after Effective Lifetime

<2.78-1
  • M
Information Exposure

<2.78-1
  • C
Out-of-Bounds

<2.78-1
  • C
Out-of-Bounds

<2.78-1
  • C
Out-of-bounds Write

<2.78-1
  • H
Improper Input Validation

<2.78-1
  • L
CVE-2026-5172

<2.90-4~deb12u2
  • L
CVE-2026-4893

<2.90-4~deb12u2
  • L
CVE-2026-4892

<2.90-4~deb12u2
  • L
CVE-2026-4891

<2.90-4~deb12u2
  • L
CVE-2026-4890

<2.90-4~deb12u2
  • L
CVE-2026-2291

<2.90-4~deb12u2
  • H
Use After Free

<2.87-1
  • M
CVE-2021-3448

<2.85-1
  • H
Improper Input Validation

<2.76-1
  • M
Improper Data Handling

<2.72-3.1
  • M
Improper Input Validation

<2.66-1
  • M
Improper Input Validation

<2.63-1
  • M
Resource Management Errors

<2.50-1
  • M
Out-of-Bounds

<2.50-1
  • M
CVE-2008-3350

<2.44-1
  • H
Improper Input Validation

<2.26-1
  • M
Insufficient Entropy

<2.43-1
  • M
CVE-2006-2017

<2.30-1
  • H
Origin Validation Error

<2.21
  • M
CVE-2005-0876

<2.21