CVE-2026-4890

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in dnsmasq via DNSSEC Validation

Publication date: 2026-05-11

Last updated on: 2026-07-02

Assigner: CERT/CC

Description

A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-11

Last Modified

2026-07-02

Generated

2026-07-11

AI Q&A

2026-05-11

EPSS Evaluated

2026-07-09

NVD

CVE-2026-4890

EUVD

EUVD-2026-29152

Affected Vendors & Products

Vendor	Product	Version / Range
thekelleys	dnsmasq	to 2.92rel2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-835	The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Attack-Flow Graph

Executive Summary

CVE-2026-4890 is a Denial of Service (DoS) vulnerability found in the DNSSEC validation process of the dnsmasq software. This vulnerability allows remote attackers to send specially crafted DNS packets that cause the dnsmasq service to become unavailable or crash.

Impact Analysis

This vulnerability can impact you by causing a denial of service on systems running dnsmasq. Attackers can exploit this flaw remotely to disrupt DNS services, potentially leading to loss of network connectivity or interruption of services that rely on DNS resolution.

Mitigation Strategies

To mitigate the Denial of Service vulnerability in dnsmasq (CVE-2026-4890), you should update dnsmasq to the latest stable version where the issue is fixed.

The latest stable release, dnsmasq-2.92rel2, is available and likely contains security updates addressing this vulnerability.

Ensure you download the update from a trusted source and verify the integrity of the files using the provided cryptographic signatures.

Compliance Impact

The provided context and resources do not contain information regarding the impact of CVE-2026-4890 on compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-4890. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70