DEBIAN-CVE-2026-93006: Medium severity debian/dnsmasq vulnerability
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the requested file. In PXE network-boot environments this can substitute attacker-chosen boot content for a victim machine.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker must be on the local network and able to request a file from the dnsmasq TFTP server. No privileges or user interaction are required.
Which environments face the most significant impact?
PXE network-boot environments are especially affected because a victim machine may receive attacker-chosen boot content instead of its requested boot file. The flaw can also cause later TFTP clients to receive data from a previously cached transfer.