2 lines
1.8 KiB
JSON
2 lines
1.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"dnsmasq","vendor":"dnsmasq","versions":[{"lessThan":"2.92rel2","status":"affected","version":"0","versionType":"custom"}]}],"source":"cret@cert.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information."}],"id":"CVE-2026-4893","lastModified":"2026-06-17T10:57:24.507","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4893","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-11T18:28:57.486938Z","version":"2.0.3"}}]},"published":"2026-05-11T18:16:41.593","references":[{"source":"cret@cert.org","url":"https://github.com/NixOS/nixpkgs/pull/519082"},{"source":"cret@cert.org","url":"https://github.com/NixOS/nixpkgs/pull/519093"},{"source":"cret@cert.org","url":"https://github.com/pi-hole/FTL/releases/tag/v6.6.2"},{"source":"cret@cert.org","url":"https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html"},{"source":"cret@cert.org","url":"https://thekelleys.org.uk/dnsmasq/CVE/"},{"source":"cret@cert.org","url":"https://www.kb.cert.org/vuls/id/471747"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Awaiting Analysis"}
|