The version of dnsmasq installed on the remote host is prior to 2.90-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DNSMASQ-2026-004 advisory.

    A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker     who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing     all DNS resolution for its clients. (CVE-2026-13002)

    A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to     cause a denial of service via a crafted DNS packet. (CVE-2026-4890)

    A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers     to cause a denial of service via a crafted DNS packet. (CVE-2026-4891)

    A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local     attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. (CVE-2026-4892)

    An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a     crafted DNS packet with RFC 7871 client subnet information. (CVE-2026-4893)

    A buffer overflow in dnsmasq's extract_addresses() function allows an attacker to trigger a heap out-of-     bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the     pointer past the record's end. (CVE-2026-5172)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1206:06 advisory.

    * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)
      * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)
      * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)
      * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)
      * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of dnsmasq installed on the remote host is prior to 2.92rel2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-135-01 advisory.

    New dnsmasq packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the dnsmasq security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to     cause a denial of service via a crafted DNS packet.(CVE-2026-4890)

    A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local     attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.(CVE-2026-4892)

    A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers     to cause a denial of service via a crafted DNS packet.(CVE-2026-4891)

    An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a     crafted DNS packet with RFC 7871 client subnet information.(CVE-2026-4893)

    dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to     inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP     address, or to cause a DoS.(CVE-2026-2291)

Tenable has extracted the preceding description block directly from the EulerOS dnsmasq security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2458-1 advisory.

    This update for dnsmasq fixes the following issues

    - CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker     redirect       (bsc#1258251).
    - CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).
    - CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).
    - CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).
    - CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source     checks       (bsc#1265004).
    - CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).
    - CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service     (bsc#1262487).

    Changes for dnsmasq:

    - Update to security release 2.92rel2.
    - Fix setting of compile time options from the spec file.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:34508 advisory.

    The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic     Host Configuration Protocol) server.

    Security Fix(es):

    * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)

    * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)

    * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)

    * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)

    * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19373 advisory.

    The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic     Host Configuration Protocol) server.

    Security Fix(es):

    * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)

    * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)

    * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)

    * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)

    * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-741:05 advisory.

    * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)
      * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)
      * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)
      * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)
      * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 11.0.1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1.8 advisory.

  - A flaw was found in gnutls. Servers configured with RSA-PSK (RivestShamirAdleman  Pre-Shared Key)     wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could     exploit this by sending a specially crafted username, leading to an authentication bypass. This     vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
    (CVE-2026-42010)

  - Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send     contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer     might contain sensitive data from the previous execution of the application process which leads to     sensitive data leakage to an attacker. RSA_public_encrypt() returns the number of bytes written on success     and -1 on error. The affected code tests only whether the return value is non-zero. As a result, if RSA     encryption fails, encapsulation can still return success to the caller, set the output lengths, and leave     the caller to use the contents of the ciphertext buffer as if a valid KEM ciphertext had been produced. If     applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an attacker-supplied invalid RSA public key     without first validating that key, then this may cause stale or uninitialized contents of the caller-     provided ciphertext buffer to be disclosed to the attacker in place of the KEM ciphertext. As a workaround     calling EVP_PKEY_public_check() or EVP_PKEY_public_check_quick() before EVP_PKEY_encapsulate() will     mitigate the issue. The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.1 and 3.0 are affected by this issue.
    (CVE-2026-31790)

  - Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version     2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in     a one byte heap buffer overflow. (CVE-2026-5450)

  - An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error     messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.
    (CVE-2024-34459)

  - A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service. (CVE-2026-33845)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
316945	Amazon Linux 2 : dnsmasq, --advisory ALAS2DNSMASQ-2026-004 (ALASDNSMASQ-2026-004)	Nessus	Amazon Linux Local Security Checks	2026/5/27	2026/8/25	high
325455	MiracleLinux 9 : dnsmasq-2.85-18.el9_8.1 (AXSA:2026-1206:06)	Nessus	Miracle Linux Local Security Checks	2026/7/7	2026/7/7	high
315015	Slackware Linux 15.0 / current dnsmasq Multiple Vulnerabilities (SSA:2026-135-01)	Nessus	Slackware Local Security Checks	2026/5/16	2026/5/28	high
332788	EulerOS 2.0 SP13 : dnsmasq (EulerOS-SA-2026-2963)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	high
332890	EulerOS 2.0 SP13 : dnsmasq (EulerOS-SA-2026-3013)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	high
321692	SUSE SLES12 Security Update : dnsmasq (SUSE-SU-2026:2458-1)	Nessus	SuSE Local Security Checks	2026/6/20	2026/7/3	high
324603	RHEL 9 : dnsmasq (RHSA-2026:34508)	Nessus	Red Hat Local Security Checks	2026/7/1	2026/7/1	high
315566	RHEL 9 : dnsmasq (RHSA-2026:19373)	Nessus	Red Hat Local Security Checks	2026/5/20	2026/5/28	high
318123	MiracleLinux 8 : dnsmasq-2.79-36.el8_10 (AXSA:2026-741:05)	Nessus	Miracle Linux Local Security Checks	2026/6/1	2026/6/1	high
339446	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1.8)	Nessus	Misc.	2026/8/25	2026/8/25	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high