The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6384a3cf14 advisory.

    # Update to 2.92rel2

    ## 2.92 point release incorporating fixes for:

      - CVE-2026-2291
      - CVE-2026-4890
      - CVE-2026-4891
      - CVE-2026-4892
      - CVE-2026-4893
      - CVE-2026-5172

    https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of dnsmasq installed on the remote host is prior to 2.90-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DNSMASQ-2026-004 advisory.

    A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker     who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing     all DNS resolution for its clients. (CVE-2026-13002)

    A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to     cause a denial of service via a crafted DNS packet. (CVE-2026-4890)

    A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers     to cause a denial of service via a crafted DNS packet. (CVE-2026-4891)

    A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local     attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. (CVE-2026-4892)

    An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a     crafted DNS packet with RFC 7871 client subnet information. (CVE-2026-4893)

    A buffer overflow in dnsmasq's extract_addresses() function allows an attacker to trigger a heap out-of-     bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the     pointer past the record's end. (CVE-2026-5172)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the dnsmasq package has been released.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ac5cceec13 advisory.

    # Update to 2.92rel2

    ## 2.92 point release incorporating fixes for:

      - CVE-2026-2291
      - CVE-2026-4890
      - CVE-2026-4891
      - CVE-2026-4892
      - CVE-2026-4893
      - CVE-2026-5172

    https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0344 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-5172:
    A buffer overflow in dnsmasqs extract_addresses() function allows an attacker to trigger a heap out-of-     bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the     pointer past the records end.

    CVE-2026-4893:
    An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a     crafted DNS packet with RFC 7871 client subnet information.

    CVE-2026-4892:
    A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local     attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.

    CVE-2026-4891:
    A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers     to cause a denial of service via a crafted DNS packet.

    CVE-2026-4890:
    A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to     cause a denial of service via a crafted DNS packet.

    CVE-2026-2291:
    dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to     inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP     address, or to cause a DoS.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_19158 advisory.

    * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)

    * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)

    * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)

    * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)

    * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)

    * dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of dnsmasq installed on the remote host is prior to 2.92rel2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-135-01 advisory.

    New dnsmasq packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the dnsmasq security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2458-1 advisory.

    This update for dnsmasq fixes the following issues

    - CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker     redirect       (bsc#1258251).
    - CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).
    - CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).
    - CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).
    - CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source     checks       (bsc#1265004).
    - CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).
    - CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service     (bsc#1262487).

    Changes for dnsmasq:

    - Update to security release 2.92rel2.
    - Fix setting of compile time options from the spec file.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19158 advisory.

    The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic     Host Configuration Protocol) server.

    Security Fix(es):

    * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)

    * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)

    * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)

    * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)

    * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)

    * dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1729 advisory.

    A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker     who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing     all DNS resolution for its clients. (CVE-2026-13002)

    A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to     cause a denial of service via a crafted DNS packet. (CVE-2026-4890)

    A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers     to cause a denial of service via a crafted DNS packet. (CVE-2026-4891)

    A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local     attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. (CVE-2026-4892)

    An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a     crafted DNS packet with RFC 7871 client subnet information. (CVE-2026-4893)

    A buffer overflow in dnsmasq's extract_addresses() function allows an attacker to trigger a heap out-of-     bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the     pointer past the record's end. (CVE-2026-5172)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19158 advisory.

    - Prevent overflow in extract_name function (CVE-2026-2291)
    - Prevent DoS in DNSSEC validation (CVE-2026-4890)
    - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
    - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
    - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
    - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the dnsmasq package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local     attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.(CVE-2026-4892)

    dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to     inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP     address, or to cause a DoS.(CVE-2026-2291)

    A buffer overflow in dnsmasq's extract_addresses() function allows an attacker to trigger a heap out-of-     bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the     pointer past the record's end.(CVE-2026-5172)

    An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a     crafted DNS packet with RFC 7871 client subnet information.(CVE-2026-4893)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization dnsmasq security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
315523	Fedora 43 : dnsmasq (2026-6384a3cf14)	Nessus	Fedora Local Security Checks	2026/5/19	2026/10/20	high
316945	Amazon Linux 2 : dnsmasq, --advisory ALAS2DNSMASQ-2026-004 (ALASDNSMASQ-2026-004)	Nessus	Amazon Linux Local Security Checks	2026/5/27	2026/8/25	high
328932	Photon OS 5.0: Dnsmasq PHSA-2026-5.0-0914	Nessus	PhotonOS Local Security Checks	2026/7/22	2026/10/14	high
314983	Fedora 44 : dnsmasq (2026-ac5cceec13)	Nessus	Fedora Local Security Checks	2026/5/15	2026/10/20	high
319759	TencentOS Server 4: dnsmasq (TSSA-2026:0344)	Nessus	Tencent Local Security Checks	2026/6/8	2026/8/26	high
333859	Photon OS 5.0: Dnsmasq PHSA-2026-5.0-91-0866	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	high
356785	Rocky Linux 10.2 [CIQ] Security Update: dnsmasq / dnsmasq-debuginfo / dnsmasq-debugsource / dnsmasq-utils / etc Multiple Vulnerabilities (crlsa-2026_19158)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
315015	Slackware Linux 15.0 / current dnsmasq Multiple Vulnerabilities (SSA:2026-135-01)	Nessus	Slackware Local Security Checks	2026/5/16	2026/10/20	high
321692	SUSE SLES12 Security Update : dnsmasq (SUSE-SU-2026:2458-1)	Nessus	SuSE Local Security Checks	2026/6/20	2026/7/3	high
319598	Photon OS 5.0: Dnsmasq PHSA-2026-5.0-0866	Nessus	PhotonOS Local Security Checks	2026/6/6	2026/10/14	high
315378	RHEL 10 : dnsmasq (RHSA-2026:19158)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/10/20	high
316834	Amazon Linux 2023 : dnsmasq, dnsmasq-utils (ALAS2023-2026-1729)	Nessus	Amazon Linux Local Security Checks	2026/5/26	2026/8/25	high
327498	Oracle Linux 10 : dnsmasq (ELSA-2026-19158)	Nessus	Oracle Linux Local Security Checks	2026/7/17	2026/7/17	high
377382	EulerOS Virtualization 2.15.1 : dnsmasq (EulerOS-SA-2026-4632)	Nessus	Huawei Local Security Checks	2026/11/7	2026/11/7	high
377415	EulerOS Virtualization 2.15.0 : dnsmasq (EulerOS-SA-2026-4690)	Nessus	Huawei Local Security Checks	2026/11/7	2026/11/7	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high