CVE-2025-12198: dnsmasq Config File util.c parse_hex heap-based overflow
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12198?
CVE-2025-12198 has been classified as a high severity vulnerability due to the potential for a heap-based buffer overflow.
How do I fix CVE-2025-12198?
To fix CVE-2025-12198, update dnsmasq to version 2.73rc7 or higher, which includes patches for this vulnerability.
Who is affected by CVE-2025-12198?
Only users running dnsmasq versions up to 2.73rc6 are affected by CVE-2025-12198.
What components of dnsmasq does CVE-2025-12198 impact?
CVE-2025-12198 impacts the Config File Handler, specifically the parse_hex function in the src/util.c file.
Is local access required to exploit CVE-2025-12198?
Yes, local access is required to exploit CVE-2025-12198 due to its nature as a local buffer overflow vulnerability.