A flaw was found in dnsmasq.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 17, 2026 · NIST NVD

   Detected

   A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).

2. Sep 1, 2026 · NIST NVD

   Updated

   A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).

Sources

• CVE.orgVulnerability recordCVE-2026-6507

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-6507

  A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the option. This can lead to memory corruption, ca

  nvd.nist.gov

References

• Reference · access.redhat.com
• Reference · bugzilla.redhat.com