CVE-2025-12200

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12200", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "REJECTED", "assignerShortName": "VulDB", "dateReserved": "2025-10-25T06:22:04.063Z", "datePublished": "2025-10-27T01:07:44.551Z", "dateUpdated": "2025-11-03T22:47:56.396Z", "dateRejected": "2025-11-03T22:47:56.396Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2025-11-03T22:47:56.396Z"}, "rejectedReasons": [{"lang": "en", "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities."}]}}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12200", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "REJECTED", "assignerShortName": "VulDB", "dateReserved": "2025-10-25T06:22:04.063Z", "datePublished": "2025-10-27T01:07:44.551Z", "dateUpdated": "2025-11-03T22:47:56.396Z", "dateRejected": "2025-11-03T22:47:56.396Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2025-11-03T22:47:56.396Z"}, "rejectedReasons": [{"lang": "en", "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities."}]}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and intentional behavior within dnsmasq's documented design, rather than security vulnerabilities."}], "id": "CVE-2025-12200", "lastModified": "2026-11-09T20:10:00.200", "metrics": {}, "published": "2025-10-27T01:15:39.937", "references": [], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "dnsmasq: dnsmasq Config File option.c parse_dhcp_opt null pointer dereference", "id": "2406465", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406465"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "(CWE-404|CWE-476)", "details": ["A NULL pointer dereference vulnerability in dnsmasq, located in the function parse_dhcp_opt() (src/option.c). When parsing a malformed or empty OPTION_SIP_SERVER configuration value, the temporary buffer m remains uninitialized (NULL). The code later unconditionally performs m[0] = 0, resulting in a write to the null address and causing a segmentation fault during startup. This leads to a Denial of Service (DoS) condition, preventing dnsmasq from launching. The issue can be exploited locally by supplying a crafted dnsmasq.conf file."], "mitigation": {"lang": "en:us", "value": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.\nTo reduce the risk, restrict write access to the dnsmasq.conf file and related configuration directories to trusted, privileged users only. Ensure that no untrusted process or user can modify DHCP or SIP-related options in the configuration. Deploy integrity monitoring or configuration management tools to detect unauthorized changes before restart."}, "name": "CVE-2025-12200", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "dnsmasq", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-10-27T01:07:44Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-12200\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-12200\nhttps://shimo.im/docs/5xkGoMo0WVfY4dkX/\nhttps://vuldb.com/?ctiid.329870\nhttps://vuldb.com/?id.329870\nhttps://vuldb.com/?submit.673155"], "statement": "This vulnerability is rated Low because it only results in a local denial of service rather than a compromise of integrity or confidentiality. The crash occurs during configuration parsing\u2014before dnsmasq begins serving network requests\u2014so it cannot be remotely triggered through normal DNS or DHCP traffic. Exploitation requires local access or control over the dnsmasq configuration file, which is typically restricted to privileged users. While the crash is deterministic and causes complete service unavailability, its impact is limited to availability and cannot be used to execute arbitrary code or escalate privileges.", "threat_severity": "Low"}

{"created": "2025-10-27T22:09:57.089674+00:00", "updated": "2025-10-27T22:09:57.089701+00:00", "vendors": ["dnsmasq", "dnsmasq$PRODUCT$dnsmasq"]}