CVE-2025-12200: dnsmasq Config File option.c parse_dhcp_opt null pointer dereference
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12200?
CVE-2025-12200 is classified as a local denial of service vulnerability due to a null pointer dereference.
How do I fix CVE-2025-12200?
To fix CVE-2025-12200, upgrade dnsmasq to version 2.73rc7 or later, which addresses the vulnerability.
What components are affected by CVE-2025-12200?
CVE-2025-12200 affects the Config File Handler component specifically in the function parse_dhcp_opt.
Can CVE-2025-12200 be exploited remotely?
No, CVE-2025-12200 can only be exploited locally.
Who is impacted by CVE-2025-12200?
Users of dnsmasq versions up to and including 2.73rc6 are impacted by CVE-2025-12200.