What is GHSA-2frf-fr59-fcjq?

GHSA-2frf-fr59-fcjq is a security advisory published by GitHub Security Advisories with Medium severity. A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and...

Which CVE IDs does GHSA-2frf-fr59-fcjq cover?

GHSA-2frf-fr59-fcjq covers the following CVE IDs: CVE-2026-93007. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2frf-fr59-fcjq?

GHSA-2frf-fr59-fcjq has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-2frf-fr59-fcjqMediumCVSS 5.3

A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and...

Vendor

GitHub Security Advisories

Published

October 29, 2026

Last Modified

October 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-93007 →

📋 Description

A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive timeout on client connections. A remote attacker can open idle TCP connections to port 53 and occupy the entire pool, preventing new TCP DNS connections and DNSSEC validation that requires TCP fallback. UDP DNS resolution continues, and occupied slots are released after a fixed lifetime.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-93007
https://access.redhat.com/security/cve/CVE-2026-93007
https://bugzilla.redhat.com/show_bug.cgi?id=2536076
https://github.com/advisories/GHSA-2frf-fr59-fcjq