{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"dnsmasq","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NQF1GZSYPM5M8S06ZY1PVR","modified_at":"2026-10-01T03:02:11.387476441Z","published_at":"2026-08-14T16:16:49.267Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-13002","https://security-tracker.debian.org/tracker/CVE-2026-13002"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-13002","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-13002"}],"summary":"A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted respon"}