2 lines
2.1 KiB
JSON
2 lines
2.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"dnsmasq","vendor":"dnsmasq","versions":[{"lessThan":"2.92rel2","status":"affected","version":"0","versionType":"custom"}]}],"source":"cret@cert.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS."}],"id":"CVE-2026-2291","lastModified":"2026-07-20T21:16:46.783","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2291","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-13T12:38:54.623336Z","version":"2.0.3"}}]},"published":"2026-05-11T18:16:31.363","references":[{"source":"cret@cert.org","url":"https://github.com/NixOS/nixpkgs/pull/519082"},{"source":"cret@cert.org","url":"https://github.com/NixOS/nixpkgs/pull/519093"},{"source":"cret@cert.org","url":"https://github.com/pi-hole/FTL/releases/tag/v6.6.2"},{"source":"cret@cert.org","url":"https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html"},{"source":"cret@cert.org","url":"https://thekelleys.org.uk/dnsmasq/CVE/"},{"source":"cret@cert.org","url":"https://www.kb.cert.org/vuls/id/471747"},{"source":"cret@cert.org","url":"https://www.suse.com/security/cve/CVE-2026-2291.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/07/20/14"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Awaiting Analysis"}
|