CVE-2026-4890
Received Received - Intake
Denial of Service in dnsmasq via DNSSEC Validation

Publication date: 2026-05-11

Last updated on: 2026-05-11

Assigner: CERT/CC

Description
A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-11
Last Modified
2026-05-11
Generated
2026-06-21
AI Q&A
2026-05-12
EPSS Evaluated
2026-06-19
NVD
CVE-2026-4890
EUVD
EUVD-2026-29152
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
thekelleys dnsmasq to 2.92rel2 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The provided context and resources do not contain information regarding the impact of CVE-2026-4890 on compliance with common standards and regulations such as GDPR or HIPAA.

Executive Summary

CVE-2026-4890 is a Denial of Service (DoS) vulnerability found in the DNSSEC validation process of the dnsmasq software. This vulnerability allows remote attackers to send specially crafted DNS packets that cause the dnsmasq service to become unavailable or crash.

Impact Analysis

This vulnerability can impact you by causing a denial of service on systems running dnsmasq. Attackers can exploit this flaw remotely to disrupt DNS services, potentially leading to loss of network connectivity or interruption of services that rely on DNS resolution.

Mitigation Strategies

To mitigate the Denial of Service vulnerability in dnsmasq (CVE-2026-4890), you should update dnsmasq to the latest stable version where the issue is fixed.

The latest stable release, dnsmasq-2.92rel2, is available and likely contains security updates addressing this vulnerability.

Ensure you download the update from a trusted source and verify the integrity of the files using the provided cryptographic signatures.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-4890. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart