← All credits

Red Hat would like to thank Shubham Raj (Causal Security) for reporting this issue.

20 vulnerability records and advisories credit this contributor.

Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service

Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder

Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check

Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms

Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation

Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

CVE-2026-102474

Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation

CVE-2026-102473

Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled

Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations

Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush