CVE-2019-14513: Debian Linux

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491.

Affected products

• Debian Debian Linux: version 8.0 only
• Thekelleys Dnsmasq: before 2.76 (fixed in 2.76)

Published 2019-08-01. Last modified 2026-06-17.