[Git][security-tracker-team/security-tracker][master] Add "new" CVE assigned for ancient dnsmasq issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4c1fe335 by Salvatore Bonaccorso at 2026-02-07T07:37:05+01:00
Add "new" CVE assigned for ancient dnsmasq issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -513,7 +513,10 @@ CVE-2020-37129 (Memu Play 7.1.3 contains an insecure folder permissions vulnerab
 CVE-2020-37128 (ZOC Terminal 7.25.5 contains a script processing vulnerability that al ...)
 	NOT-FOR-US: ZOC Terminal
 CVE-2020-37127 (Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the d ...)
-	TODO: check
+	- dnsmasq 2.80-1 (unimportant)
+	NOTE: https://www.exploit-db.com/exploits/48301
+	NOTE: Fixed by: https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=2b38e3823b12ab13f86c3a44648de436daadb1f6 (v2.80test6)
+	NOTE: Negligible security impact
 CVE-2020-37126 (Free Desktop Clock 3.0 contains a stack overflow vulnerability in the  ...)
 	NOT-FOR-US: Free Desktop Clock
 CVE-2020-37125 (Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulner ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c1fe33596a17c8c2ae19d35747c43a8f0272488

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c1fe33596a17c8c2ae19d35747c43a8f0272488
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260207/cf09a454/attachment-0001.htm>