Vulnerability details

CVE-2026-5172

Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9dnsmasq dnsmasq

CVE-2026-5172

CVSS 3.1

7.5High

Official description

A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

CVSS scores

Score	Version	Source	Vector
7.3High	3.1	CISA ADP / Vulnrichment (CISA-ADP)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L`
7.5High	3.1	CVEProject cvelistV5 (CNA) (redhat-SADP)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Affected products

Vendor	Product	Versions	Source
Red Hat	Red Hat Enterprise Linux 8	All	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Enterprise Linux 9	All	CVEProject cvelistV5 (CNA)
dnsmasq	dnsmasq	v < 2.92rel2	CVEProject cvelistV5 (CNA)

References and advisories

https://www.kb.cert.org/vuls/id/471747
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
https://thekelleys.org.uk/dnsmasq/CVE/
https://github.com/NixOS/nixpkgs/pull/519082
https://github.com/NixOS/nixpkgs/pull/519093
https://github.com/pi-hole/FTL/releases/tag/v6.6.2
https://access.redhat.com/security/cve/CVE-2026-5172 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2458521 issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5172.json x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:19158 vendor-advisoryx_refsource_REDHAT

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-05-11
Last updated: 2026-09-01
State: Published
Assigner (CNA): certcc

Exploit prediction (EPSS)

2.68%

Probability of exploitation in 30 days

85.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Partial

Weaknesses (CWE)

CWE-125
Out-of-bounds Read