CVE-2026-13002
published 2026-08-14CVE-2026-13002: A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the…
PriorityP416medium4.4CVSS 3.1
AVLACLPRHUINSUCNINAH
EPSS
0.15%
3.6th percentile
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | openshift_container_platform | — | — |
| thekelleys | dnsmasq | — | — |
CVSS provenance
nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing
vendor_redhat·2026-06-08·CVSS 4.4
CVE-2026-13002 [MEDIUM] CWE-835 dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing
dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.
Statement: Redhat confirms that the dnsmasq component is required for installations where DNNSEC service is in use.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Package: dnsmasq (Red Hat Enterprise Linux 10) - Fix deferred
Package: dnsmasq (Red Hat Enterprise Linux 6) - Not aff
VulDB
Red Hat Enterprise Linux/OpenShift Container Platform NSEC NSEC3 Bitmap Parsing infinite loop (Nessus ID 335458)
vuldb·2026-08-15·CVSS 4.4
CVE-2026-13002 [MEDIUM] Red Hat Enterprise Linux/OpenShift Container Platform NSEC NSEC3 Bitmap Parsing infinite loop (Nessus ID 335458)
A vulnerability classified as critical was found in Red Hat Enterprise Linux and OpenShift Container Platform. Affected is an unknown function of the component NSEC NSEC3 Bitmap Parsing. Such manipulation leads to infinite loop.
This vulnerability is documented as CVE-2026-13002. The attack can be executed remotely. There is not any exploit available.
GHSA
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service.
ghsa_unreviewed·2026-08-14
CVE-2026-13002 [MEDIUM] CWE-835 A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service.
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-13002 dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing [fedora-all]
bugzilla·2026-08-14·CVSS 4.4
CVE-2026-13002 [MEDIUM] CVE-2026-13002 dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing [fedora-all]
CVE-2026-13002 dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Summary: An off-by-two error in NSEC/NSEC3 type bitmap window iteration in dnssec.c causes an infinite loop when processing multi-window bitmaps. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients. The bug has been present since DNSSEC support was added in v2.69 (2014), and I’ve confirmed exploitation on v2.81, v2.85, v2.91, v2.92, and current HEAD.
Bugzilla
CVE-2026-13002 dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing
bugzilla·2026-06-08·CVSS 4.4
CVE-2026-13002 [MEDIUM] CVE-2026-13002 dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing
CVE-2026-13002 dnsmasq: Infinite loop DoS in DNSSEC NSEC/NSEC3 type bitmap parsing
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.
2026-08-14
Published