EUVD-2026-23419

| CVE-2026-6507 HIGH
2026-04-17 redhat GHSA-28hj-3gj2-63m5
Denial Of Service Memory Corruption Buffer Overflow Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Openshift Container Platform 4
7.5
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Updated
Apr 17, 2026 - 15:37 vuln.today
v4 (cvss_changed)
Analysis Updated
Apr 17, 2026 - 13:27 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Apr 17, 2026 - 13:22 vuln.today
cvss_changed
Analysis Generated
Apr 17, 2026 - 12:56 vuln.today

DescriptionNVD

A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server configured with the --dhcp-split-relay option. This can lead to memory corruption, causing the dnsmasq daemon to crash and resulting in a denial of service (DoS).

AnalysisAI

Out-of-bounds write in dnsmasq's DHCP split-relay handler allows remote unauthenticated denial of service via crafted BOOTREPLY packets. Affects Red Hat Enterprise Linux 6-10 and OpenShift Container Platform 4 when dnsmasq runs with the --dhcp-split-relay option enabled. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Inventory all dnsmasq deployments across RHEL 6-10 and OpenShift 4 systems and identify which instances run with --dhcp-split-relay enabled via process inspection and configuration audit. Within 7 days: Disable the --dhcp-split-relay option where feasible or migrate affected services to alternative DHCP relay solutions; document any business justification for retention. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

EUVD-2026-23419 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy