Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive timeout on client connections. A remote attacker can open idle TCP connections to port 53 and occupy the entire pool, preventing new TCP DNS connections and DNSSEC validation that requires TCP fallback. UDP DNS resolution continues, and occupied slots are released after a fixed lifetime.

Etkilenen sürümler10 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• bugzilla.redhat.com/show_bug.cgi Üçüncü taraf
• access.redhat.com/security/cve/CVE-2026-93007 Diğer

Kayıt geçmişi

1. 30 Eki 2026 10:20Etkilenen sürüm bilgisi güncellendi
2. 29 Eki 2026 15:47Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-119528Gimp: gimp: stack buffer overflow in psd image resource header loader
• 3,7 CVE-2026-115456Gcc: out-of-bounds read in std::from_chars
• 6,5 CVE-2026-115455Gcc: stack overflow in std::bitset on libstdc++
• 5,9 CVE-2026-114691Gcc: integer wrap in `std
• 6,2 CVE-2026-114690Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
• 5,9 CVE-2026-118593Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)