[<prev] [<thread-prev] [day] [month] [year] [list]
Message-Id: <007B59A3-903D-48C6-8295-764499DA5190@edvina.net>
Date: Sun, 2 Nov 2025 11:30:19 +0100
From: "Olle E. Johansson" <oej@...ina.net>
To: oss-security@...ts.openwall.com
Subject: Re: Questionable CVE's reported against dnsmasq
> On 1 Nov 2025, at 04:00, Solar Designer <solar@...nwall.com> wrote:
>
> CVEs against dnsmasq (CVE-2025-12198, CVE-2025-12199, CVE-2025-12200)
> and Kamailio (CVE-2025-12204, CVE-2025-12205, CVE-2025-12206, and
> CVE-2025-12207) mentioned in this thread are not yet disputed and have
> no comments of this sort in their descriptions.
As part of the Kamailio project I can say that we did just become aware of these CVEs in your email. They do not make sense. Trying to get to the report, the config files used to provoke the issue can’t be downloaded.
If you have access to edit the config files, there are much more simple ways to cause damage than to provoke a problem in the config file parser.
We will have an internal discussion but that will likely lead to the project disputing these CVEs.
Best regards,
/Olle
Content of type "text/html" skipped
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
