CVE-2017-15107: Thekelleys Dnsmasq

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.

Affected products

• Thekelleys Dnsmasq: up to and including 2.78

Published 2018-01-23. Last modified 2026-06-17.