CVE-2026-2291

HIGH

dnsmasq < 2.93 and < 2.92rel2 - Heap Buffer Overflow in extract_name()

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-2291. PoCs published by JianrongXiao-Linksys.

AI-analyzed exploit summary This repository contains functional exploit code for multiple dnsmasq CVEs, including CVE-2026-2291, with tools to test and trigger vulnerabilities via crafted DNS responses. It includes a malicious DNS server, remote scanner, and on-device verification script.

Description

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

Exploits (1)

github WORKING POC

by JianrongXiao-Linksys · pythonpoc

https://github.com/JianrongXiao-Linksys/dnsmasq-cve-2026

View Code ZIP pw:eip

This repository contains functional exploit code for multiple dnsmasq CVEs, including CVE-2026-2291, with tools to test and trigger vulnerabilities via crafted DNS responses. It includes a malicious DNS server, remote scanner, and on-device verification script.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: dnsmasq < 2.92rel2

No auth needed

Prerequisites: Network access to target dnsmasq instance · Ability to configure upstream DNS on target

MITRE ATT&CK