CVE Vulnerabilities

CVE-2026-13002

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Aug 14, 2026 | Modified: Aug 14, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
4.4 LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References