The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19158 advisory.

    - Prevent overflow in extract_name function (CVE-2026-2291)
    - Prevent DoS in DNSSEC validation (CVE-2026-4890)
    - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
    - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
    - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
    - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the eeb4d69a-4d74-11f1-9a9c-994b98c88011 advisory.

    Simon Kelley reports:

            Today, 11th May 2026 CERT is releasing a set of six CVEs for serious             security vulnerabilities in dnsmasq. These are all long-standing             bugs             which apply to pretty much all non-ancient versions.


            Christopher Cullen and Molly Jaconski write, in Vulnerability Note             VU#471747:


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the dnsmasq package has been released.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6384a3cf14 advisory.

    # Update to 2.92rel2

    ## 2.92 point release incorporating fixes for:

      - CVE-2026-2291
      - CVE-2026-4890
      - CVE-2026-4891
      - CVE-2026-4892
      - CVE-2026-4893
      - CVE-2026-5172

    https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of dnsmasq installed on the remote host is prior to 2.90-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DNSMASQ-2026-004 advisory.

    A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker     who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing     all DNS resolution for its clients. (CVE-2026-13002)

    A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to     cause a denial of service via a crafted DNS packet. (CVE-2026-4890)

    A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers     to cause a denial of service via a crafted DNS packet. (CVE-2026-4891)

    A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local     attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. (CVE-2026-4892)

    An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a     crafted DNS packet with RFC 7871 client subnet information. (CVE-2026-4893)

    A buffer overflow in dnsmasq's extract_addresses() function allows an attacker to trigger a heap out-of-     bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the     pointer past the record's end. (CVE-2026-5172)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
327498	Oracle Linux 10 : dnsmasq (ELSA-2026-19158)	Nessus	Oracle Linux Local Security Checks	2026/7/17	2026/7/17	high
314369	FreeBSD : dnsmasq -- multiple vulnerabilities (eeb4d69a-4d74-11f1-9a9c-994b98c88011)	Nessus	FreeBSD Local Security Checks	2026/5/12	2026/5/28	high
328932	Photon OS 5.0: Dnsmasq PHSA-2026-5.0-0914	Nessus	PhotonOS Local Security Checks	2026/7/22	2026/7/22	high
315523	Fedora 43 : dnsmasq (2026-6384a3cf14)	Nessus	Fedora Local Security Checks	2026/5/19	2026/5/28	high
316945	Amazon Linux 2 : dnsmasq, --advisory ALAS2DNSMASQ-2026-004 (ALASDNSMASQ-2026-004)	Nessus	Amazon Linux Local Security Checks	2026/5/27	2026/8/25	high

检测

插件搜索

high

high

high

high

high