Simon Kelley 7b151eb606 Fix NSEC bitmap parsing infinite loop. CVE-2026-4890 ...

Report from Royce M <royce@xchglabs.com>.

Location: dnssec.c:1290-1306, dnssec.c:1450-1463

The bitmap window iteration advances by p[1] instead of p[1]+2
(missing the 2-byte window header). With bitmap_length=0, both rdlen and p are
unchanged, causing an infinite loop and dnsmasq stops responding to all queries.

Bug is reachable before RRSIG validation
(confirmed by the source comment at line 2125), so no valid
DNSSEC signatures are needed.

2026-05-10 21:49:40 +01:00

bld

Remove hash-questions.c - no longer required.

2024-11-02 21:29:47 +00:00

contrib

Omit message type from leasequery.c option dump.

2025-05-14 22:36:03 +01:00

dbus

Allow configuring filter-A/AAAA via dbus.

2023-03-08 15:35:05 +00:00

logo

tweak favicon

2012-04-02 20:40:34 +01:00

man

Accept DHCPv6 vendorclasses with any enterprise number in --dhcp-vendorclass

2026-03-17 13:29:49 +00:00

po

Update German translations.

2025-12-07 13:44:40 +00:00

src

Fix NSEC bitmap parsing infinite loop. CVE-2026-4890

2026-05-10 21:49:40 +01:00

submodules

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

.gitattributes

Add .gitattributes to substitute VERSION on export.

2017-05-12 13:14:17 +01:00

.gitignore

Remove debian directory and replace with a git submodule.

2024-02-22 22:45:37 +00:00

.gitmodules

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

Android.mk

import of dnsmasq-2.57.tar.gz

2012-01-05 17:31:15 +00:00

CHANGELOG

Rework storage allocation for domain names. CVE-2026-2291

2026-05-10 21:49:39 +01:00

CHANGELOG.archive

Spelling fixes.

2018-01-14 17:32:52 +00:00

COPYING

Update GNU GPL file.

2022-05-13 21:22:11 +01:00

COPYING-v3

import of dnsmasq-2.41.tar.gz

2012-01-05 17:31:13 +00:00

debian

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

dnsmasq.conf.example

Remove trailing white space from dnsmasq.conf.example

2025-12-05 15:12:28 +00:00

doc.html

Added a tail to .hmtl files

2025-07-20 15:29:43 +01:00

FAQ

Typo in FAQ.

2021-06-15 23:14:59 +01:00

Makefile

Bump copyrights to 2026.

2026-04-08 12:08:18 +01:00

setup.html

Added a tail to .hmtl files

2025-07-20 15:29:43 +01:00

trust-anchors.conf

Add IANA Root TA 2024.

2024-12-18 23:58:58 +00:00

VERSION

VERSION file

2012-01-05 22:00:08 +00:00

S

Description

No description provided

GPL-2.0

6.2 MiB

0 Stars 1 Watchers 0 Forks

Languages

C 94.3%

Perl 2.2%

HTML 1.2%

Shell 1%

Makefile 0.6%

Other 0.6%