CVE-2026-4892
Received
Received - Intake
Heap-based Out-of-Bounds Write in dnsmasq DHCPv6
Publication date: 2026-05-11
Last updated on: 2026-05-11
Assigner: CERT/CC
Description
Description
A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| the_knot | dhcpv6 | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a heap-based out-of-bounds write in the DHCPv6 implementation of dnsmasq. It allows local attackers to execute arbitrary code with root privileges by sending a specially crafted DHCPv6 packet.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability can gain root privileges on the affected system, allowing them to execute arbitrary code. This can lead to full system compromise, unauthorized access, data theft, or disruption of services.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70