PT-2026-51332 · Red Hat · Red Hat Enterprise Linux 10+5

Yiwei Hou · Publicado 2026-06-22 · Atualizado 2026-06-22 · CVE-2026-12725

Mitre

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Correção

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

CVE-2026-12725

Produtos afetados

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 6

Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Openshift Container Platform 4

Referências · 3

• https://access.redhat.com/security/cve/CVE-2026-12725 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2490763 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-12725 · Nota de Segurança