Heap Buffer Overflow in dnsmasq Can Redirect DNS Lookups
CVE-2026-2291
7.3HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-2291?
The dnsmasq service contains a flaw in its extract_name() function, which can be exploited to cause a heap buffer overflow. This vulnerability allows attackers to inject incorrect DNS cache entries, leading to potential redirection of DNS queries to malicious IP addresses. Furthermore, this could enable denial-of-service conditions by disrupting normal DNS operations. Mitigating this vulnerability is crucial for maintaining network security and integrity.
Affected Version(s)
dnsmasq 0 < 2.92rel2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.