Threats tagged 'ghsa-2r7h-m3qh-f4cj'

A vulnerability in dnsmasq occurs when the DHCP leasequery feature is enabled without restricting allowed source addresses. This flaw allows any host on the local network to request DHCP lease records, revealing assigned IP addresses, MAC addresses, hostnames, and lease metadata. The leasequery feature is disabled by default and must be explicitly enabled by an administrator. Red Hat rates this vulnerability as low impact because the exposed data is not highly sensitive and the feature is opt-in.