thekelleys dnsmasq

Name: thekelleys dnsmasq
Brand: thekelleys

productUS

cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

10critical14high9medium4low

updated 2026-10-26

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-50387US	high7.5	100.0% (100th)	Exploit	2.90	2024-02-14	< 2.90
CVE-2017-14492US	critical9.8	94.5% (100th)	Exploit	no fix	2017-10-03	≤ 2.77
CVE-2017-14491US	critical9.8	86.5% (100th)	Exploit	no fix	2017-10-04	≤ 2.77
CVE-2017-14495US	high7.5	85.4% (100th)	Exploit	no fix	2017-10-03	≤ 2.77
CVE-2017-14493US	critical9.8	85.2% (100th)	Exploit	no fix	2017-10-03	≤ 2.77
CVE-2017-14494US	medium5.9	70.5% (99th)	Exploit	no fix	2017-10-03	≤ 2.77
CVE-2017-14496US	high7.5	68.4% (99th)	Exploit	no fix	2017-10-03	≤ 2.77
CVE-2009-2957US	medium6.8	15.8% (97th)	Exploit	no fix	2009-09-02	76 versions
CVE-2009-2958US	medium4.3	10.8% (96th)	Exploit	no fix	2009-09-02	76 versions
CVE-2020-25686US	low3.7OT elevated	5.47% (93rd)	Exploit	2.83	2021-01-20	< 2.83
CVE-2020-25687US	medium5.9	89.3% (100th)	—	2.83	2021-01-20	< 2.83
CVE-2020-25683US	medium5.9	88.7% (100th)	—	2.83	2021-01-20	< 2.83
CVE-2020-25681US	high8.1	84.1% (100th)	—	2.83	2021-01-20	< 2.83
CVE-2020-25682US	high8.1	75.1% (100th)	—	2.83	2021-01-20	< 2.83
CVE-2017-13704US	high7.5	65.4% (99th)	—	no fix	2017-10-03	≤ 2.77
CVE-2012-3411US	medium5.0	5.03% (92nd)	—	no fix	2013-03-05	≤ 2.62
CVE-2015-3294US	medium6.4	4.95% (92nd)	—	no fix	2015-05-08	≤ 2.73
CVE-2020-25684US	low3.7	4.16% (91st)	—	2.83	2021-01-20	< 2.83
CVE-2013-0198US	medium5.0	2.79% (86th)	—	no fix	2013-03-05	≤ 2.65
CVE-2021-45956US	critical9.8	2.71% (86th)	—	no fix	2022-01-01	= 2.86
CVE-2021-45954US	critical9.8	2.71% (86th)	—	no fix	2022-01-01	= 2.86
CVE-2021-45953US	critical9.8	2.71% (86th)	—	no fix	2022-01-01	= 2.86
CVE-2021-45952US	critical9.8	2.71% (86th)	—	no fix	2022-01-01	= 2.86
CVE-2021-45951US	critical9.8	2.71% (86th)	—	no fix	2022-01-01	= 2.86
CVE-2019-14834US	low3.7	2.65% (86th)	—	2.81	2020-01-07	< 2.81
CVE-2017-15107US	high7.5	2.65% (86th)	—	no fix	2018-01-23	≤ 2.78
CVE-2022-0934US	high7.5	2.64% (85th)	—	2.87	2022-08-29	< 2.87
CVE-2021-45955US	critical9.8	2.60% (85th)	—	no fix	2022-01-01	= 2.86
CVE-2021-45957US	critical9.8	2.56% (85th)	—	no fix	2022-01-01	= 2.86
CVE-2008-3214US	high7.8	2.53% (85th)	—	no fix	2008-07-18	= 2.25
CVE-2015-8899US	high7.5	2.50% (85th)	—	no fix	2016-06-30	≤ 2.75
CVE-2021-3448US	medium4.0	2.28% (83rd)	—	2.85	2021-04-08	< 2.85
CVE-2020-25685US	low3.7	2.23% (83rd)	—	2.83	2021-01-20	< 2.83
CVE-2005-0877US	high7.5	1.97% (80th)	—	2.21	2005-05-02	< 2.21
CVE-2023-28450US	high7.5OT elevated	1.84% (79th)	—	2.90	2023-03-15	< 2.90
CVE-2019-14513US	high7.5	1.70% (77th)	—	2.76	2019-08-01	< 2.76
CVE-2023-49441US	high7.5	0.66% (51st)	—	no fix	2024-06-06	= 2.9
CVE-2026-12725US	—	0.53% (44th)	—	2.93	2026-06-22	< 2.93
CVE-2026-12969US	—	0.26% (17th)	—	2.93	2026-06-23	< 2.93

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write9 CVEs
CWE-122Heap-based Buffer Overflow7 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-358Improperly Implemented Security Check for Standard5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-290Authentication Bypass by Spoofing3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan