CVE-2026-13002 — Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with …
Published: 2026-08-14 · CVSS: 4.4 · CVSS 3.1
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7