CVE-2026-13002

Medium

Description

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.

SeverityMedium
CVSS4.4
Exploit probability—
ProductRedhat Openshift Container Platform
PublishedAug 14, 2026
First seenAug 14, 2026

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
redhat openshift_container_platform4.0—
redhat enterprise_linux6.0, 7.0, 8.0, 9.0, 10.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.