The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:20589 advisory.

    * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)
      * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)
      * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)
      * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)
      * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the dnsmasq package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1827-1 advisory.

    This update for dnsmasq fixes the following issue:

    - CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker     redirect       (bsc#1258251).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1516 advisory.

    dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to     inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP     address, or to cause a DoS. (CVE-2026-2291)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19158 advisory.

    - Prevent overflow in extract_name function (CVE-2026-2291)
    - Prevent DoS in DNSSEC validation (CVE-2026-4890)
    - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
    - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
    - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
    - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19158 advisory.

    The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic     Host Configuration Protocol) server.

    Security Fix(es):

    * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)

    * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)

    * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)

    * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)

    * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)

    * dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
316889	AlmaLinux 8 : dnsmasq (ALSA-2026:20589)	Nessus	Alma Linux Local Security Checks	2026/5/27	2026/5/28	high
319598	Photon OS 5.0: Dnsmasq PHSA-2026-5.0-0866	Nessus	PhotonOS Local Security Checks	2026/6/6	2026/7/22	high
315050	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dnsmasq (SUSE-SU-2026:1827-1)	Nessus	SuSE Local Security Checks	2026/5/16	2026/5/16	high
315629	Amazon Linux 2023 : dnsmasq, dnsmasq-utils (ALAS2023-2026-1516)	Nessus	Amazon Linux Local Security Checks	2026/5/20	2026/6/11	high
327498	Oracle Linux 10 : dnsmasq (ELSA-2026-19158)	Nessus	Oracle Linux Local Security Checks	2026/7/17	2026/7/17	high
315378	RHEL 10 : dnsmasq (RHSA-2026:19158)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/5/28	high

检测

插件搜索

high

high

high

high

high

high