CVE-2026-12969— Dnsmasq 数组越界读取漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-12969の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation
ソース: NVD (National Vulnerability Database)
脆弱性説明
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
跨界内存读
ソース: NVD (National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - | cpe:/o:redhat:enterprise_linux:10 | |
| Red Hat | Red Hat Enterprise Linux 6 | - | cpe:/o:redhat:enterprise_linux:6 | |
| Red Hat | Red Hat Enterprise Linux 7 | - | cpe:/o:redhat:enterprise_linux:7 | |
| Red Hat | Red Hat Enterprise Linux 8 | - | cpe:/o:redhat:enterprise_linux:8 | |
| Red Hat | Red Hat Enterprise Linux 9 | - | cpe:/o:redhat:enterprise_linux:9 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | - | cpe:/a:redhat:openshift:4 |
II. CVE-2026-12969の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-12969のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-12969 其他参考 (2)
Same Patch Batch · Red Hat · 2026-06-23 · 12 CVEs total
| CVE-2026-11807 | 9.6 CRITICAL | Eda-server: websocket missing authorization allows credential theft via activation_id spoo |
| CVE-2026-12112 | 7.8 HIGH | Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse |
| CVE-2026-10609 | 6.8 MEDIUM | Openshift/cluster-logging-operator: cluster logging operator creates and forwards servicea |
| CVE-2026-11820 | 6.5 MEDIUM | Community.general: community.general nexmo — api credentials exposed in get url query stri |
| CVE-2026-9073 | 6.2 MEDIUM | Foreman-mcp-server: mcp server: insecure sensitive http header sanitization |
| CVE-2026-11819 | 5.5 MEDIUM | Community.general: community.general keyring_info — os keyring passphrase returned in plai |
| CVE-2026-55655 | 5.0 MEDIUM | Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat ente |
| CVE-2026-12892 | 4.4 MEDIUM | Gstreamer1-plugins-bad: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 na |
| CVE-2026-55653 | 4.3 MEDIUM | Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path du |
| CVE-2026-12891 | 4.3 MEDIUM | Gstreamer1-plugins-bad: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266 |
| CVE-2026-55654 | 3.7 LOW | Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi in |
IV. 関連脆弱性
- CVE-2026-12892
Gstreamer1-plugins-bad: gstreamer1-plugins-bad: 1-byte heap - CVE-2026-12891
Gstreamer1-plugins-bad: gstreamer1-plugins-bad: global buffe - CVE-2026-11820
Community.general: community.general nexmo — api credentials - CVE-2026-11819
Community.general: community.general keyring_info — os keyri - CVE-2026-55654
Openssh: heap out-of-bounds read in red hat enterprise linux
同じベンダー: Red Hat
- CVE-2026-13434
Virt-controller-rhel9: kubevirt: kubevirt: multus default-ne - CVE-2026-13325
Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration - CVE-2026-13322
Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-ser - CVE-2026-13083
Pen-drive: pen-drive: stored xss via unescaped cluster data - CVE-2026-13318
Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-fo
同じ弱点: CWE-125
- CVE-2026-54341
Dragonfly: RESTORE operations may crash the server - CVE-2026-12340
Out-of-bounds heap read in SM2/SM3 certificate Subject Key I - CVE-2026-56788
RTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index i - CVE-2026-12897
Out-of-bounds read in Horner Automation Cscape - CVE-2026-6094
Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing
V. CVE-2026-12969へのコメント
まだコメントはありません