CVE-2025-12199

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12199", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "REJECTED", "assignerShortName": "VulDB", "dateReserved": "2025-10-25T06:22:00.749Z", "datePublished": "2025-10-27T01:02:09.029Z", "dateUpdated": "2025-11-03T22:47:45.128Z", "dateRejected": "2025-11-03T22:47:45.128Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2025-11-03T22:47:45.128Z"}, "rejectedReasons": [{"lang": "en", "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities."}]}}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12199", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "REJECTED", "assignerShortName": "VulDB", "dateReserved": "2025-10-25T06:22:00.749Z", "datePublished": "2025-10-27T01:02:09.029Z", "dateUpdated": "2025-11-03T22:47:45.128Z", "dateRejected": "2025-11-03T22:47:45.128Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2025-11-03T22:47:45.128Z"}, "rejectedReasons": [{"lang": "en", "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities."}]}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities."}], "id": "CVE-2025-12199", "lastModified": "2026-11-09T20:10:00.200", "metrics": {}, "published": "2025-10-27T01:15:39.737", "references": [], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "dnsmasq: dnsmasq Config File network.c check_servers null pointer dereference", "id": "2406461", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406461"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "(CWE-404|CWE-476)", "details": ["A null pointer dereference vulnerability exists in dnsmasq, within the function check_servers() in src/network.c. When dnsmasq attempts to log upstream servers during startup, a malformed or inconsistent configuration may cause the SERV_HAS_DOMAIN flag to be set while serv->domain is NULL. This results in a call to strlen(serv->domain), triggering a segmentation fault and crashing the service. The issue leads to a Denial of Service (DoS) condition, preventing dnsmasq from starting properly."], "mitigation": {"lang": "en:us", "value": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.\nTo reduce the risk, ensure that only trusted and validated configuration files are used by dnsmasq, and restrict write or modification permissions on /etc/dnsmasq.conf and related directories to authorized users. Avoid loading dynamically generated or unverified configurations."}, "name": "CVE-2025-12199", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-10-27T01:02:09Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-12199\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-12199\nhttps://shimo.im/docs/ZzkLMVMN7vIYJBAQ/\nhttps://vuldb.com/?ctiid.329869\nhttps://vuldb.com/?id.329869\nhttps://vuldb.com/?submit.673154"], "statement": "This vulnerability is considered Low severity because it can only be triggered through a locally supplied or misconfigured configuration file, not through network input or remote interaction. The flaw results in a crash during dnsmasq\u2019s initial startup phase, meaning the service fails to launch rather than being disrupted while active. It does not allow memory corruption, code execution, or privilege escalation\u2014only a predictable null pointer dereference leading to process termination. Since exploitation requires direct access to or control over the dnsmasq configuration, the attack surface is minimal in typical deployments where configurations are managed by trusted administrators.", "threat_severity": "Low"}

{"created": "2025-10-27T22:09:59.490002+00:00", "updated": "2025-10-27T22:09:59.490029+00:00", "vendors": ["dnsmasq", "dnsmasq$PRODUCT$dnsmasq"]}